What would a "fully-constrained tool call environment" be?