Load existing entries if persist path exists.

Convert string backoff to enum.

Validate allowlist and blocklist entries to prevent overly broad suppression.

Validate policy fields on construction.

Validate context fields on construction.

Compute content hash if not already set.

Derive penalty from severity only when the caller didn't supply one.

Calculate total penalty from violations.

Load Cedar policy from file if path is provided. Also validates ``rate_limit_window_seconds`` — a non-positive window would either di

Ensure _events is a bounded deque with the correct maxlen.

Execute *target* inside the child process, sending the outcome via *result_queue*.

ALLOW_OVERRIDES: any allow wins. Among allows, highest priority wins.

Another tool with a different implementation.

Apply a matched rule and generate actionable error messages.

Async execution delegates to sync _run.

Simple async callable for testing.

Delete from backend through circuit breaker with tracing.

Agent function that always returns wrong output.