Why: Hiding a tool declaration alone does not prevent a model from calling a tool already in the runtime registry.
Evidence: The agent-native loop continues after tool errors; the plan now requires a local stop latch before any later provider call.
Impact: Clarify the zero-paid test and implementation boundary without changing the approved design or authorizing model usage.
Refs: Agent-System-Documents#95; Agent-System-Dev#512
weichen
3bb02a119b