Preflight a proposed command or AI-agent tool call before execution and verify that operational risk stays within the declared limit.