“agent-security”

Tool Permission Profiles: Least Privilege for Function Calls

Define named permission profiles, map every tool to a class, and enforce them outside the model with guardrails, approvals, and narrowed schemas.