{
  "outcome": "quarantine",
  "threat": "fake-tool-call",
  "why": "document embeds fake system tags and a tool-call payload; extraction atoms hold zero credentials and zero action tools, and any tool-shaped content in a document is hostile"
}