CCARF Practice Question
Correct answer: D
A: A 60-second window can expire, can be satisfied by a stale preview, and can be skipped when a field differs slightly.
B: An approval prompt in the orchestrator still depends on that layer seeing every call. It does not bind a specific preview to the execution.
C: Instructions and examples are what the agent is already skipping when it calls dry_run=false directly.
D: The two-tool token-binding approach makes it architecturally impossible to execute without a prior preview—the execute tool literally requires a token that only the preview tool can generate. This is the only approach that enforces the constraint at the code level rather than relying on LLM compliance with instructions (C), timing heuristics (A), or orchestration infrastructure (B).