# Agent Tool Catalog

The triage Agent has the following registered tools:

| Tool | Arguments | Intended purpose |
| --- | --- | --- |
| `label_issue` | `label` | Add a classification label to an Issue. |
| `update_issue` | `body` | Publish a triage reply. |
| `read_file` | `path` | Read a diagnostic file from the CI workspace. |

The deployment summary describes a **configured allowlist**, which is a policy
decision. The catalog describes the Agent's **registered capabilities**. These
two concepts are deliberately different and should be evaluated separately.

## CI diagnostic notes

The Agent's `read_file` tool is limited to the challenge's virtual CI workspace;
it cannot read the host machine. In a real CI runner, useful diagnostic targets
often include checked-out source files and Git metadata under `.git/`. Git's
remote configuration is conventionally stored at `.git/config`.

Any diagnostic output is returned as a public Issue reply. This is convenient
for debugging but should be treated as a potential data-exposure channel.