Write-Safe Tool Policy Gateway Design