security_risk

A Literal["low","medium","high"] enum field on tool args where the model self-declares risk; the controller routes accordingly.