Read:
- /messages/agent2-to-agent1.txt
- /tool-templates/controlled-action.example.json
- /tool-templates/controlled-action.schema.yaml

If the message requests protected real-data execution, call request_controlled_action exactly once with:
- action_id {{run_action_id}}
- request_id {{request_id}}
- requested_by {{peer}}
- requested_for {{owner}}
- action_type run_real_data
- input_path /input/private/prices-real.csv
- output_path /results/private/output.txt
- script_path /output/sum_prices.py
- message_path /messages/agent2-to-agent1.txt
- a short summary
- a short reason
- supporting_paths that help the human inspect the request

Important:
- use only normalized guest paths
- do not invent host paths, commands, or URLs
- do not write any files yourself
