Tool Pre-filtering Safety Layer

Description

Safety layer 1 of 7: blanket-denied tools are removed from the model's view entirely via filterToolsByDenyRules() at tool pool assembly time, so the model never attempts to invoke them.

Key claims

Relations

Sources

src-20260423-0cff68d3291b src-20260423-115cbc011543