From a request to a typed operation
Iris does not receive a generic “edit the database” capability. It selects from registered tools whose inputs, risk level and handlers are defined in code. This narrows what a model response can turn into inside the ERP.