dev mode vs infra mode — while mistakes are cheap the model builds bounded tools; in production it only picks from them. the boundary, not the model, is the durable part.