Stop trusting the agent: bind tool-call approvals to the exact call
A developer argues that using a boolean flag for tool-call approvals in agentic systems is insecure and proposes binding approvals to specific calls via HMAC-signed tokens. The approach prevents repla…