Loading Open Internet
    Enforcing Tool-Call Boundaries in LLM Agents