Notes on runtime security for LLM agent tool calls. https://norviq.dev/blog/ 2026-08-24T00:00:00Z Santosh Kumar Puppala https://norviq.dev/blog/the-mcp-server-you-approved/ 2026-08-24T00:00:00Z

A tool definition is an answer, not an artifact — and the protocol has a blessed way for a server to change its answer after you approved it. What that opens, what closes it, and where every defence I know of, mine included, gets thin.