Let the model suggest a tool while the application validates, authorizes, executes, and records the action.
模型负责建议工具,应用负责校验、授权和执行;用只读查询走完一次安全闭环。