If an agent can call tools, a scolding prompt is not a control. Name the four gates.
Enable JavaScript to read the full note.