Deterministic Pre-Execution Gates

Reddy et al.: silent policy violations on policy-permissive tools are a distinct failure class (78% of τ²-bench airline failures are wrong final states with no tool error); four deterministic read-only gates over the proposed call raise task success +12.4pp — action-boundary enforcement can raise success, not just bound its safety cost, but per-gate precision must be audited.