v2.12.0
Security
Scoped tool permissions
Limit each tool per agent by resource, amount and action — enforced at runtime, not by prompt.
Tool permissions can now be scoped per agent: specific Slack channels, refund limits in Stripe, read-only Snowflake roles. Limits are enforced by the runtime, so an agent can’t talk its way past them.