Move the verdict outside the model. Slot-based preconditions for irreversible tool calls — execution reads a verdict record, never a conditional.
provenance schema-validation audit-log deterministic preconditions human-in-the-loop design-by-contract runtime-verification policy-enforcement prompt-injection llm-safety llm-guardrails tool-calling mcp-server mcp-tools agent-safety agent-reliability deterministic-workflows irreversible-actions llm-constraints
-
Updated
Aug 26, 2026 - JavaScript