Go SDK: Align mode with SEP

docs/sep.md

@@ -201,7 +201,7 @@ interface Interceptor {
   /**
    * Failure routing policy (default: false - fail-closed)
    *
-   * Enforce mode:
+   * Active mode:
    * - false (fail-closed): If the interceptor crashes or times out, block the message
    * - true (fail-open): If the interceptor fails, allow the message to proceed
    *

go/sdk/README.md

@@ -22,7 +22,7 @@ ext.AddInterceptor(&interceptors.Validator{
             Events: []string{interceptors.EventToolsCall},
             Phase:  interceptors.PhaseRequest,
         }},
-        Mode: interceptors.ModeEnforce,
+        Mode: interceptors.ModeActive,
     },
     Handler: func(_ context.Context, inv *interceptors.Invocation) (*interceptors.ValidationResult, error) {
         raw := inv.Payload.(json.RawMessage)

go/sdk/doc/DESIGN.md

@@ -174,7 +174,7 @@ Response-phase validators see the post-mutation payload.
 
 ### Validator execution
 - All matching validators run in parallel (goroutines).
-- A validator returning `Valid: false` with `Severity: "error"` in enforced
+- A validator returning `Valid: false` with `Severity: "error"` in active
   mode aborts the chain.
 - `FailOpen: true` validators log errors and record an `InvokeResult`
   for observability, but don't abort.

go/sdk/examples/mutator/main.go

@@ -41,7 +41,7 @@ func main() {
 				Events: []string{interceptors.EventToolsCall},
 				Phase:  interceptors.PhaseResponse,
 			}},
-			Mode: interceptors.ModeEnforce,
+			Mode: interceptors.ModeActive,
 		},
 		Handler: func(_ context.Context, inv *interceptors.Invocation) (*interceptors.MutationResult, error) {
 			raw, ok := inv.Payload.(json.RawMessage)

go/sdk/examples/validator/main.go

@@ -41,7 +41,7 @@ func main() {
 				Events: []string{interceptors.EventToolsCall},
 				Phase:  interceptors.PhaseRequest,
 			}},
-			Mode: interceptors.ModeEnforce,
+			Mode: interceptors.ModeActive,
 		},
 		Handler: func(_ context.Context, inv *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 			raw, ok := inv.Payload.(json.RawMessage)

go/sdk/interceptors/chain/chain_test.go

@@ -155,7 +155,7 @@ func TestChain_ExecutionHandler(t *testing.T) {
 		wantNoPayload bool
 	}{
 		{
-			name: "audit-to-enforce validator override aborts chain",
+			name: "audit-to-active validator override aborts chain",
 			interceptor: &interceptors.Validator{
 				Metadata: interceptors.Metadata{
 					Name:  "v",
@@ -169,18 +169,18 @@ func TestChain_ExecutionHandler(t *testing.T) {
 					}, nil
 				},
 			},
-			directive:   &chain.Directive{Mode: modePtr(interceptors.ModeEnforce)},
+			directive:   &chain.Directive{Mode: modePtr(interceptors.ModeActive)},
 			phase:       interceptors.PhaseRequest,
 			wantStatus:  chain.ChainValidationFailed,
 			wantAborted: true,
 		},
 		{
-			name: "enforce-to-audit validator override does not abort",
+			name: "active-to-audit validator override does not abort",
 			interceptor: &interceptors.Validator{
 				Metadata: interceptors.Metadata{
 					Name:  "v",
 					Hooks: []interceptors.Hook{{Events: []string{"test/event"}, Phase: interceptors.PhaseRequest}},
-					Mode:  interceptors.ModeEnforce,
+					Mode:  interceptors.ModeActive,
 				},
 				Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 					return &interceptors.ValidationResult{
@@ -199,7 +199,7 @@ func TestChain_ExecutionHandler(t *testing.T) {
 				Metadata: interceptors.Metadata{
 					Name:  "m",
 					Hooks: []interceptors.Hook{{Events: []string{"test/event"}, Phase: interceptors.PhaseResponse}},
-					Mode:  interceptors.ModeEnforce,
+					Mode:  interceptors.ModeActive,
 				},
 				Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.MutationResult, error) {
 					modified, _ := json.Marshal(map[string]any{"value": "mutated"})
@@ -217,7 +217,7 @@ func TestChain_ExecutionHandler(t *testing.T) {
 				Metadata: interceptors.Metadata{
 					Name:  "v",
 					Hooks: []interceptors.Hook{{Events: []string{"test/event"}, Phase: interceptors.PhaseRequest}},
-					Mode:  interceptors.ModeEnforce,
+					Mode:  interceptors.ModeActive,
 				},
 				Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 					return &interceptors.ValidationResult{
@@ -275,7 +275,7 @@ func TestChain_ExecutionHandler_ShortCircuit(t *testing.T) {
 		Metadata: interceptors.Metadata{
 			Name:  "v",
 			Hooks: []interceptors.Hook{{Events: []string{"test/event"}, Phase: interceptors.PhaseRequest}},
-			Mode:  interceptors.ModeEnforce,
+			Mode:  interceptors.ModeActive,
 		},
 		Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 			invoked = true
@@ -320,7 +320,7 @@ func TestChain_FailOpenRecordsExecutionResult(t *testing.T) {
 					Events: []string{"test/event"},
 					Phase:  interceptors.PhaseRequest,
 				}},
-				Mode:     interceptors.ModeEnforce,
+				Mode:     interceptors.ModeActive,
 				FailOpen: true,
 			},
 			Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
@@ -334,7 +334,7 @@ func TestChain_FailOpenRecordsExecutionResult(t *testing.T) {
 					Events: []string{"test/event"},
 					Phase:  interceptors.PhaseRequest,
 				}},
-				Mode: interceptors.ModeEnforce,
+				Mode: interceptors.ModeActive,
 			},
 			Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 				return &interceptors.ValidationResult{Valid: true}, nil
@@ -368,7 +368,7 @@ func TestChain_FailOpenRecordsExecutionResult(t *testing.T) {
 					Events: []string{"test/event"},
 					Phase:  interceptors.PhaseResponse,
 				}},
-				Mode:         interceptors.ModeEnforce,
+				Mode:         interceptors.ModeActive,
 				FailOpen:     true,
 				PriorityHint: interceptors.NewPriority(10),
 			},
@@ -383,7 +383,7 @@ func TestChain_FailOpenRecordsExecutionResult(t *testing.T) {
 					Events: []string{"test/event"},
 					Phase:  interceptors.PhaseResponse,
 				}},
-				Mode:         interceptors.ModeEnforce,
+				Mode:         interceptors.ModeActive,
 				PriorityHint: interceptors.NewPriority(20),
 			},
 			Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.MutationResult, error) {
@@ -468,7 +468,7 @@ func TestChain_AuditModeErrorsDoNotAbort(t *testing.T) {
 					Events: []string{"test/event"},
 					Phase:  interceptors.PhaseResponse,
 				}},
-				Mode:         interceptors.ModeEnforce,
+				Mode:         interceptors.ModeActive,
 				PriorityHint: interceptors.NewPriority(20),
 			},
 			Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.MutationResult, error) {

go/sdk/interceptors/doc.go

@@ -35,7 +35,7 @@
 //
 // A [Validator] inspects the payload and decides whether the request
 // or response should proceed. All validators for a given event run
-// in parallel. If any validator in enforced mode ([ModeEnforce])
+// in parallel. If any validator in active mode ([ModeActive])
 // returns an error-severity message, the chain aborts before any
 // mutators run. Only error-severity messages cause an abort; warn
 // and info findings are recorded in the chain execution result but
@@ -51,7 +51,7 @@
 //	            Events: []string{"tools/call"},
 //	            Phase:  interceptors.PhaseRequest,
 //	        }},
-//	        Mode: interceptors.ModeEnforce,
+//	        Mode: interceptors.ModeActive,
 //	    },
 //	    Handler: func(ctx context.Context, inv *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 //	        raw := inv.Payload.(json.RawMessage)
@@ -79,7 +79,7 @@
 //	            Events: []string{"tools/call"},
 //	            Phase:  interceptors.PhaseResponse,
 //	        }},
-//	        Mode: interceptors.ModeEnforce,
+//	        Mode: interceptors.ModeActive,
 //	    },
 //	    Handler: func(ctx context.Context, inv *interceptors.Invocation) (*interceptors.MutationResult, error) {
 //	        raw := inv.Payload.(json.RawMessage)
@@ -112,7 +112,7 @@
 // successful results, and a FailOpen flag that controls what happens
 // when the handler returns a Go error. These are orthogonal:
 //
-//   - [ModeEnforce]: fully enforced — validation failures block,
+//   - [ModeActive]: fully active — validation failures block,
 //     mutations are applied.
 //   - [ModeAudit]: the handler runs and results are recorded, but
 //     validation findings do not block and mutated payloads are
@@ -138,15 +138,15 @@
 //
 // Behavior matrix for validators:
 //
-//	Mode=Enforce,  FailOpen=false → error aborts, Valid=false+SeverityError aborts
-//	Mode=Enforce,  FailOpen=true  → error continues, Valid=false+SeverityError aborts
+//	Mode=Active,  FailOpen=false → error aborts, Valid=false+SeverityError aborts
+//	Mode=Active,  FailOpen=true  → error continues, Valid=false+SeverityError aborts
 //	Mode=Audit, FailOpen=false → error aborts, findings recorded only
 //	Mode=Audit, FailOpen=true  → error continues, findings recorded only
 //
 // Behavior matrix for mutators:
 //
-//	Mode=Enforce,  FailOpen=false → error aborts, mutations applied
-//	Mode=Enforce,  FailOpen=true  → error continues, mutations applied
+//	Mode=Active,  FailOpen=false → error aborts, mutations applied
+//	Mode=Active,  FailOpen=true  → error continues, mutations applied
 //	Mode=Audit, FailOpen=false → error aborts, mutations not propagated
 //	Mode=Audit, FailOpen=true  → error continues, mutations not propagated
 package interceptors

go/sdk/interceptors/extension/rpc_test.go

@@ -48,7 +48,7 @@ func TestListWithEventFilter(t *testing.T) {
 				Events: []string{interceptors.EventPromptsGet},
 				Phase:  interceptors.PhaseRequest,
 			}},
-			Mode: interceptors.ModeEnforce,
+			Mode: interceptors.ModeActive,
 		},
 		Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 			return &interceptors.ValidationResult{Valid: true}, nil
@@ -122,7 +122,7 @@ func TestInvokeValidatorRejects(t *testing.T) {
 				Events: []string{interceptors.EventToolsCall},
 				Phase:  interceptors.PhaseRequest,
 			}},
-			Mode: interceptors.ModeEnforce,
+			Mode: interceptors.ModeActive,
 		},
 		Handler: func(_ context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 			return &interceptors.ValidationResult{
@@ -166,7 +166,7 @@ func TestInvokeMutator(t *testing.T) {
 				Events: []string{interceptors.EventToolsCall},
 				Phase:  interceptors.PhaseRequest,
 			}},
-			Mode: interceptors.ModeEnforce,
+			Mode: interceptors.ModeActive,
 		},
 		Handler: func(_ context.Context, inv *interceptors.Invocation) (*interceptors.MutationResult, error) {
 			raw, ok := inv.Payload.(json.RawMessage)
@@ -244,7 +244,7 @@ func TestInvokeTimeout(t *testing.T) {
 				Events: []string{interceptors.EventToolsCall},
 				Phase:  interceptors.PhaseRequest,
 			}},
-			Mode: interceptors.ModeEnforce,
+			Mode: interceptors.ModeActive,
 		},
 		Handler: func(ctx context.Context, _ *interceptors.Invocation) (*interceptors.ValidationResult, error) {
 			select {