# Tool Gateway

The model does not execute tools directly. It emits an action directive and `ToolGateway` validates the tool name and arguments before execution.

Implemented tools:

- `file_read`: reads inside workspace only.
- `file_write`: writes inside workspace only and refuses overwrites unless `overwrite=true`.
- `shell_exec_safe`: runs only allowlisted commands and blocks dangerous commands.