Validates tool-call inputs against each tool's JSON Schema, as a `validate` hook — which core dispatches at the executor, so EVERY invocation door (the runner, HTTP tool routes, invokeTool) is checked rather than only the model's path.