The per-bot tool policy now carries the main bot's own tools: delegate_task
and update_user_profile are the main-only builtins, so the separate filters
from the profile and delegation branches are gone. One set of exposed tool
names drives both the executor's call guard and the prompt. The schedule
tool says new routines default to the user's time zone, which makes the
extra prompt line unnecessary. Tests that relied on an empty tool list
meaning every tool, or on the tool's own refusal text, now pass the tool
explicitly or expect the executor's refusal.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MRtGG9ARfqqhma3t85Ro2u
848abc757a