pub trait CandidateToolHandler: Send + Sync {
// Required method
fn apply<'life0, 'life1, 'life2, 'life3, 'async_trait>(
&'life0 self,
workspace: &'life1 CandidateWorkspace,
call: &'life2 ProviderToolCall,
entry: &'life3 ToolEntry,
) -> Pin<Box<dyn Future<Output = Result<EffectOutcome>> + Send + 'async_trait>>
where Self: 'async_trait,
'life0: 'async_trait,
'life1: 'async_trait,
'life2: 'async_trait,
'life3: 'async_trait;
}Expand description
One governed tool executor. Handlers never decide admission, budgets, or certification — the kernel already did; they only realize the effect against the reversible candidate.