Quarantined model

Also written: quarantine, quarantine pattern, quarantined extractor

A model with no tools that reads untrusted text and can only answer in a fixed, strict JSON shape. In the lab it turns Dana's email into an order ID and a few enum values for the privileged model.