Gate autonomous work on user intent before executing tools
A coding agent should not treat a greeting or conversational probe as authorization to execute a task. Separate session initialization from work authorization: load only context required to understand the interaction, classify the user's intent, and wait for an explicit work requ…