Deterministic grounding checks for LLM agents, no LLM in the hot path