Your prompt is not a security boundary

If your AI agent owns tools with side effects, one question decides whether it is safe to ship: what...