What was claimed, and what the evidence says.
Agents cannot call tools outside the registered tool set.
Source: Architecture overview
Inter-agent messages are logged with sender, receiver and time.
Source: Engineering handbook
A human can halt any agent run at any time.
Source: Operating procedure