The paper introduces PACE, a system for enforcing capability enforcement in tool-using LLM agents. It mediates every tool call before execution, verifying schema-defined effects against authority and preventing malicious influence. PACE shows significant security gains in agent-security benchmarks, with full-benchmark native utility losing at most three points relative to the undefended agent.