Instructions Are Hints: Guardrails for an LLM Tool Loop

A model with query access to 530 objects and 13,000 fields needs three of them. Here's the retrieval layer, the guardrails, and why two of the three don't hold.