AI systems become easier to reason about when capability and authority are separated.
A model may be capable of generating a shell command. That does not mean the model should have shell authority.
A bridge may normalize a tool call. That does not mean the bridge should execute the tool.
A durable engineering system can place policy and execution boundaries outside the reasoning component.
This is a small design distinction with large consequences.