Paper Pushes Agent Safety From Prompt Filtering to Fail-Closed Control of Tool Actions · Polylog