Every tool call, every action, every delegation is intercepted in deterministic code — before the wire. Try an attack below.
Type an attack, or tap a preset. The gate decides in milliseconds — DENIED means it never reached the model.
DENIED