Instructions Are Hints: Guardrails for an LLM Tool Loop

I wrote the same rule three times. Once in the tool description, so the model would read it while deciding what to call. Once in the system prompt, in capitals, because the first one wasn't holding. A