Every tool call — whether it sends an SMS, submits an NVIDIA NIM inference job, reads a GitHub PR, or queries a database — passes through the same Custodian kernel before executing. Authority band enforced. OCSF-logged. Kill-switch honoured.