[CONSTRAINT]
tool_scope: defined_list — straying tends to confuse parent context
report_to: parent_agent
no_silent_scope_expansion: true
external_calls: only_when_explicitly_authorized
done_condition: verified_output
note: helper guard rails — if something unusual is needed, surface it
