Function evaluate_tool_call 

pub fn evaluate_tool_call(
    permission_level: PermissionLevel,
    tool_name: &str,
    arguments: &str,
) -> ToolPolicyEvaluation

Evaluate a tool call against a PermissionLevel.

Behavior is intentionally aligned with the pipeline runtime gating:

• Sandbox blocks write operations
• Restricted requires confirmation for write operations
• Full allows all operations