AI agents can execute every tool call correctly and still break company rules. A language model chooses its next tokens probabilistically. Tool calls let it act on the outside world, but they do not make its decisions deterministic: the model still decides which tool to call, when to call it and what arguments to pass. That distinction matters…