Correctover (CCS) provides semantic authorization and signed evidence for agent tool calls. It understands code intent, not keyword matches. Developer preview, source-available.
The same exec() is chain-evaluated by context — blocked only when truly dangerous. Normal operations pass through.
Every tool call passes five semantic steps. Any of the first four matching means pass; only if none match is it judged CRITICAL — blocked, with a signed receipt.