Every MCP tool argument is model-chosen, so the signature is the boundary