Nice work. The part that collapses in IR agents is the permitted tool use enforced outside the model context.