Stop Letting Your AI Agents Call Tools Directly: The Tool Gateway Pattern

When I review an AI agent that works in a demo but breaks in production, the problem is rarely the model. Usually, the agent has direct access to a dozen tools, and nobody can say which call did what,