When your LLM plan moves a robot, clamp every command first

Split model planning from a deterministic action layer, validate every command, and test in simulation before hardware moves.