Your agent tool guard probably fails open. One minute to tell.

A gate in front of an agent tool call often passes the dangerous call when the script is missing, when it crashes, or when it exits 1. Here is a four-probe check, what an exit code means to the tool, and the one setting that closes the silent path.