[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-system-limits-which-tools-ai-agents-can-use-and-when":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},7697,"new-system-limits-which-tools-ai-agents-can-use-and-when","New System Limits Which Tools AI Agents Can Use, and When","A new framework, skilder, makes AI agents earn tool access role by role, closing gaps flat toolsets and multi-agent setups leave open.","A new framework hands AI agents their tools one need-to-know role at a time, instead of the entire company toolbox.\n\nResearchers built skilder, a system that packages an enterprise's internal tools into bundled roles, each with its own skills, instructions, and hard limits. An agent starts with a minimal catalog of roles, figures out which ones a task requires, and pulls in the matching skills, instructions, and tools through a single MCP server. Because the agent can only reach a tool after it has learned the role that contains it, the same server can enforce those boundaries automatically rather than trusting the model to follow written rules. The team tested the approach against two baselines: giving an agent flat access to every tool, and splitting work across multiple specialized agents, across 13 tasks, six models, and ten runs each.\n\nThe problem skilder is aiming at is real: dumping every internal tool into an agent's context window bloats prompts, confuses tool selection, and turns access policy into a suggestion the model can ignore. Multi-agent setups spread that risk around instead of fixing it, scattering audit logs across sessions with no guarantee of compliance. In skilder's tests, whenever a model actually completed the discovery step and made a governed call, the authorization layer blocked every out-of-scope tool call and every parameter violation, including attempts that would have breached a spending limit.\n\nThe catch is in the fine print: overall task pass rates also depended on models actually following the discovery protocol in the first place, so a perfect enforcement record does not mean agents reliably ask for permission before they act.","[\"ai agents\",\"ai governance\",\"access control\",\"mcp\"]","2026-09-25T04:00:00.000Z","2026-09-25T05:00:05.098Z","2026-09-25T05:00:10.415Z","published",null,[],"ai",[26,27,28,29],"ai agents","ai governance","access control","mcp",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.28693",0,{"sections":36},[37,40,45,50,55,60,65,70,75,80,85,90,94,99],{"name":38,"slug":24,"count":39,"latest_published_at":18},"AI",4466,{"name":41,"slug":42,"count":43,"latest_published_at":44},"Security","security",729,"2026-09-24T19:54:21.000Z",{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",386,"2026-09-24T23:50:55.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",237,"2026-09-24T22:00:00.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",182,"2026-09-25T01:25:53.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Science","science",138,"2026-09-24T18:24:52.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Consumer Tech","consumer-tech",128,"2026-09-24T19:24:34.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",88,"2026-09-24T23:06:55.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",79,"2026-09-22T22:21:13.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",71,"2026-09-24T20:45:00.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Gaming","gaming",46,"2026-09-24T17:52:29.000Z",{"name":91,"slug":92,"count":88,"latest_published_at":93},"General","general","2026-09-25T02:12:57.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",30,"2026-09-24T20:07:31.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]