Guarded tools and assurance tests for Laravel AI agents: workspace isolation, honest failures and evidence on every tool call.