Add a decision gate before tool use

A Noul can estimate whether a proposed action meets a narrow condition, such as “the user explicitly asked to send this email.” Include the proposed action and the relevant conversation excerpt. Avoid combining several independent requirements into one probability.

Authentication, permissions, and allowed destinations need deterministic enforcement. The model can prioritize a review or identify uncertainty, but it should never grant itself a capability.