Safe Execution

Prevents tool call loops draining user balance by applying "three strikes" loop detection, cost estimation, and exception channel protection.