A live tool-call guardrail, reading an 8-billion-parameter shopping agent (Qwen3-8B). Pick a situation and watch the probe score the action the assistant actually takes; the deployed alarm fires at 0.97. Notice the unsafe and safe versions often emit the same command, so the difference lives in the situation, which is what the probe reads. Scores are the recorded values from real runs.