How to design safe tool permissions for AI agents in production apps

The model is not the authority An AI agent can choose a tool, fill in arguments, and explain what it intends to do. None of those things make it authorized to perform the action. That distinction matt