Steering Agents Without Caging Them

Agents skip the steps you want them to take. Point one at a data platform and it will reach for trino_query and write SQL against a table it never looked up, ignoring the catalog that would have told it the table was deprecated last month and that one of its columns holds PII. Put &ldquo;search the catalog first&rdquo; in the tool description and the model will read it, repeat it back to you, and…