Separating model-authored programs from computed results
The restricted DSL parses an admitted program and computes its result through an interpreter instead of accepting a recalled figure.
On the restricted path, the model proposes source in a bounded language. The parser and interpreter determine which operations are admitted and compute the output against the named inputs. An accepted program cannot request arbitrary imports, shell execution, dynamic attribute access, or arbitrary filesystem access.
Preserve the separation in the interface
Store the authored program, selected input references, interpreter output, and narration separately. A model can choose an unsuitable calculation even when that calculation executes correctly. Narration can also introduce unsupported estimates unless its own generation and validation contract prevents them.
Do not give ordinary prose the interpreter’s authority. Surface refused programs and missing input evidence, and retain the actual mode used to answer a request. The agent workflow describes how to carry that separation into a developer integration.