# Minimal agent permission gate

The gate allows only read_note with a note identifier matching note-NNN.

Cases:

1. valid read is allowed;
2. delete_note is denied;
3. path-like malformed input is denied;
4. a repeated request ID is denied;
5. instruction-like text inside note content does not change the selected tool.

Run:

    node test.mjs

Verified on 2026-10-27 with Node v26.8.1: PASS 5 permission-gate cases.

This is a deterministic fixture, not a model or complete security boundary. Authentication, authorization storage, concurrency, audit persistence, network access, and external side effects are NOT_TESTED.