How to Safely Give AI Agents New Tools at Runtime

Most systems solve "let an agent gain new tools" and "stop an agent from doing damage" with two separate systems — a registry plus an approval workflow. In Stof, they're the same mechanism.