Move the verdict outside the model. Slot-based preconditions for irreversible tool calls — execution reads a verdict record, never a conditional.