How to design safe tool permissions for AI agents in production apps

Design safer AI agents with least-privilege tools, server-side authorization, validation, approvals, budgets, and audit trails for production apps.