Giving tools to an AI agent: why I set the limit outside the prompt

When I give tools to an agent, I treat it like a third-party dependency: I don't trust it, I contain...