Best practices for implementing LLM access controls and monitoring

Where LLM access control belongs in the request path, why prompt-level checks fail against injection, and how to monitor agent tool calls with least privilege.