1. CAPABILITY (SANDBOX) 2. BUDGET (TOKENS/CALLS) 3. POLICY (RULES) 4. BEHAVIORAL (FORMAT) PARSE ALLOWED WITHIN SAFE VALID TOOL CALL REQUEST CAPABILITY FILTER BUDGET FILTER POLICY FILTER BEHAVIORAL FILTER EXECUTION ENGINE Request Blocked: Invalid JSON Format Raw LLM request to execute a tool/command. Verifies tool existence and sandbox permissions. Checks token budgets and API call rate limits. Enforces safety rules and business policies. Validates schema, types, and strict JSON format. Safely runs the fully validated tool call.