Topic

Security

1 piece on this subject.

4 Mar 2026Tool permissions are an authorisation problem, not a prompt problem"You must never issue a refund over £500" in a system prompt is not a control. It is a request. The boundary belongs in the tool layer, where it can be enforced.3 min read· Agent architecture· Security· AI in production