LLM tool and function calling

The refund that fired three times: tool calls are a systems problem, not a prompt problem

A developer's LLM issued the same refund three times after a timeout. The defect was in the wiring, not the model, and the fixes are schema validation and scoped toolsets.