A zero-inference capability manifest that gates the tools a language-model agent may call.
Figure
Problem
Defences against indirect prompt injection usually add a model call to every task, which costs latency and money.
Approach
Build a tool whitelist once from the user’s instruction, by matching action verbs against per-tool profiles. Gate every tool call. Nothing the agent reads later can widen the whitelist.
