TL;DR: AI agents handed more tools than the task requires have already wiped production environments, mass-deleted mailboxes, and dropped customer databases. This entry walks through what excessive agency looks like in practice and how per-session, role-aware tool registration can limit the blast radius when using agentic frameworks. Our blog series opener introduced otto-support, the vulnerable M...