Threat modeling LLM tool-calling

A worked example of the frontmatter contract, and a short threat model for agents that are allowed to call tools.