Guard It and Check It

In this challenge, you let the agent write through an MCP server, stop it from doing so without your approval, and then check the whole agent against ground truth.

The prompt is not a place for this rule. The model can be told to ask first, and a long conversation can push the instruction out of the window. A guard is code that runs inside the tool call, so the model cannot get past it.