- Explicitly tell model not to invoke tool scripts via filesystem path - Add concrete examples of native tool calls vs shell - Document context cancellation flow from interrupt to process kill