The Hard Part of Giving AI Agents Machine Access Is Not the Tools

Reading a file is easy to implement. Running a command is easy to expose. Opening a browser is easy to wrap in a tool. The difficult part starts one step later: who is allowed to do it, to which resou