Your AI Agent Should Not Be Allowed to Approve Its Own Tool Calls

3d ago · 13 min read · Tool calls turn language into side effects. That means they need authorization outside the model. An AI agent with tool access is not just a chatbot. The moment it can reset a password, update a CRM r