SERVICE POLICIES / COMPILED GOOO
What does a policy change allow?
Test a service pattern, compare one request, or find access that a proposed grant adds. Edit the inputs and inspect the complete result from the compiled Gooo rules.
Loading the compiled Gooo policy rules…
Recheck a saved observation
One local file, up to 1 MiB. Loading it captures its exact inputs but does not run a check. The file stays in this browser and is not uploaded or stored.
No saved observation loaded.
Saved decision · unsigned, unverified claim. Its structure is valid, but this does not establish who produced it or whether the recorded program ran. Select Recheck with current Gooo to compute these inputs now.
Saved claimed decision
Recorded program identity · unverified
Gooo result
No check has run.
Complete inputs, decision and source bindings
Saved claim compared with this fresh result
Matching fields do not authenticate the saved observation or prove that its recorded program ran. This is a comparison with the currently verified program; it grants no authorization and changes no policy.
Recorded and current program identities
The download includes the captured inputs and complete result. It is an unsigned browser observation; it grants no permission to change a policy or call a service.
Read the result
Request matching answers for one request. A valid input can return matched: false. Request comparison describes only that same request before and after. Grant comparison examines the relationship between two supported patterns and can return a concrete request admitted only by the proposal.
For mcp://*.x → mcp://a.*, both patterns admit mcp://a.x. Grant comparison finds mcp://a.y, which only the proposal admits. Recognized subset rules establish their bounded pattern relationship; an UNPROVEN result cannot establish a subset.
Use semantic fields only after domain_status: VALID_INPUT. The supported domain uses ASCII service types and dotted names with the documented wildcard forms. A complete Agent Mesh policy can contain additional grants, HTTP restrictions and other rules. Actual automatic updates require an authenticated host that checks current authority and policy version at its commit boundary.
Inputs stay in this browser. The page fetches only static program and source assets and stores no input history. Gooo implements the decisions; JavaScript transports inputs and displays results.
Verified program and Gooo source
Waiting for the program manifest.
Supported input domain and API guide ↗ · Try the local automatic-update host ↗ · Report a problem ↗
An independent Gooo project by asketeddy. Google does not endorse this project. Codex assisted development and verification.