Topic: typescript

Keep tool-calling agents on a short leash

The tool surface, eval loop, and refusal rules I want before an agent can touch a real repo.