feat(runtime): enforce server request authority

tests/test_tool_path_confinement.py

@@ -18,6 +18,14 @@ from types import SimpleNamespace
 from unittest.mock import patch
 
 import pytest
+from tests.runtime_evidence_helpers import server_authorized_executor
+
+
+@pytest.fixture(autouse=True)
+def standalone_dispatch_authority(monkeypatch):
+    from src import tool_execution
+    monkeypatch.setattr(tool_execution, "execute_tool_block",
+                        server_authorized_executor(tool_execution.execute_tool_block))
 
 
 def _make_block(tool_type, content):