Before tool call
      ↓
Security check