A security layer that ensures agents can only use the tools they're explicitly allowed to access.