Intercepting tool calls before execution, without patching framework internals — NullRun