An Agent Allowlist Is a Comment Until a Gate Checks the Body

A Claude Code agent declares the tools it is allowed to use in its frontmatter. That tools line looks like documentation — a courteous note about what the agent touches. It is not documentation. It is