The Custodian kernel-gated tool registry is a demo system where every tool call passes through a decision engine before execution. Each tool has an authority band (L0 read-only through L4 critical) that determines whether it can run autonomously or requires human approval.
Every tool call — whether it sends an SMS, submits an NVIDIA NIM inference job, reads a GitHub PR, or queries a database — passes through the same Custodian kernel before executing. Authority band enforced. OCSF-logged. Kill-switch honoured.