Give an agent a code-execution tool safely — why code beats discrete tools, calling tools as code, treating the code as untrusted, defense in depth, the isolation ladder, and when to use it.
Loading content...