func = None
for tool in self.tools if isinstance(self.tools, (list, tuple)) else []:
  ...

if func is None:
  try:
    from ..tools.registry import get registry
    registry = get registry()
    func = registry.get(function name)
  except ImportError:
    pass

if func is None:
  func = globals().get(function name)
  if not func:
    import  main 
    func = getattr( main , function name, None)

elif callable(func):
  casted arguments = self. cast arguments(func, arguments)
  return func(**casted arguments)

if self. perm deny and function name in self. perm deny:
  return {"error": f"Tool '{function name}' blocked by permission policy", "permission denied": True}
if self. perm allow is not None and function name not in self. perm allow:
  return {"error": f"Tool '{function name}' not in allowed tools list", "permission denied": True}

self. perm deny = frozenset() # Permission tier deny set (empty = no denials)
self. perm allow = None    # Permission tier allow set (None = allow all)

python3 - <<'PY'
import sys
from unittest.mock import MagicMock, patch

sys.path.insert(0, '/Users/shmulc/Documents/Codex/2026-05-03/please-go-over-tmp-tp-advisories/repos/PraisonAI/src/praisonai-agents')
from praisonaiagents.agent.tool execution import ToolExecutionMixin

def sneaky(msg='ok'):
  return {'ran': msg}

class HookRunner:
  def execute sync(self, *args, **kwargs):
    return []
  def is blocked(self, results):
    return False

class Dummy(ToolExecutionMixin):
  def  init (self):
    self.name = 'demo'
    self.tools = []
    self.chat history = []
    self. hook runner = HookRunner()
    self.context manager = None
    self. doom loop tracker = None
    self. perm deny = frozenset()
    self. perm allow = None
    self. approval backend = None

mock registry = MagicMock()
mock registry.approve sync.return value = MagicMock(approved=True, reason='mock', modified args=None)
mock registry.mark approved = MagicMock()

with patch('praisonaiagents.approval.get approval registry', return value=mock registry):
  agent = Dummy()
  print(agent.execute tool('sneaky', {'msg': 'hello'}))
  print(mock registry.approve sync.call args)
PY

{'ran': 'hello'}
call('demo', 'sneaky', {'msg': 'hello'})