A well-formed tool call can still be the wrong action. Put deterministic validators at the action boundary so bad inputs get blocked, explained, and recovered before they touch the real world.