Conversational commerce

Your prompt is not a precondition: check the facts outside the model before money moves

A dev.to writeup moves tool guards out of the prompt and into the executor, where a database check runs before dispatch. The same design fails open when the check itself breaks.