Container hardening

Tool calls make model output executable, so the allowlist is a pre-production review item

A dev.to walkthrough on sandboxing LLM tool calls names old web-app failure modes and old web-app controls. The delta is when you apply them: at registration, not after the first exfiltration.