Create the tool-call gate over the guardrails that evaluate tool calls. AgentOS asks it about the calls the runtime
runs itself (executionMode: 'internal') before any call of their model step runs: each call alone, then the
step's calls that pass alone together, as the stream's chunk for the step holds them, each time with the sources the
turn retrieved. A block refuses the calls it was asked about, and their tools never run.
Create the tool-call gate over the guardrails that evaluate tool calls. AgentOS asks it about the calls the runtime runs itself (
executionMode: 'internal') before any call of their model step runs: each call alone, then the step's calls that pass alone together, as the stream's chunk for the step holds them, each time with the sources the turn retrieved. A block refuses the calls it was asked about, and their tools never run.