How it works: a registry plus a disciplined runner

Two pieces. A registry holds the tools and their schemas, validates arguments, and dispatches calls. A runner for the shell tool executes the command and packages a structured, truncated result. Everything routes through the registry so that Chapter 7 can slip a permission check in front of execution with a one-line change.