Your Agent Has 200 Tools. How Many Can It Abuse?

The DNS-escape proved sandbox walls aren't enough. The operator playbook for scoping tool access before your agent finds its own exit.