RAG groundedness checks

Move execution authority out of the model and into the tool boundary

A dev.to design note inserts code gates and a human approval between the model and the tool, which is the right shape, though a policy layer that reads a severity field the model itself wrote has not moved the authority anywhere.