Your Agent's Tool List Is Not a Permission Model

Giving an agent a tool gives it every call that tool can make. Access control for agents has to happen at the call, not the menu.