CAGE Provides Certified Authorization for Tool-Using Agents

CAGE prevents unauthorized actions in tool-using agents by certifying a joint neighborhood of categorical and numerical return values. It addresses the failure of independent channel certification, where small binding faults or numerical drift can turn an authorized action into an unsafe one.