"Hand" written for now! Didn't even think about using each provider's OpenAPI.

But yep, you get the nuance. The point is that the process eg Claude Code doesn't need to be "trusted" to behave.