### artifact_guard
Validate whether requested file/artifact operations are allowed by the orchestrator rules.

Use this exact Agent Zero tool-call shape:
```json
{"tool_name":"artifact_guard","tool_args":{"action":"check","path":"README.md"}}
```

Rules:
- Do not use this tool to discover, read, infer, validate, or print credential values.
- If the tool is not found, stop and report a runtime tool-registration failure. Do not switch to WebUI login, CSRF, HTTP cache-refresh, shell credential scans, or `.env`/config/log searches.