Your agent shouldn't know about tools it can't use

I gave a clinical operations user access to two tools on an Amazon Bedrock AgentCore Gateway. Semantic tool search still returned all six tools, with full schemas, on every query. The gateway's Cedar