After MCP, the Harder Problem Is Tool Planning and the Execution Boundary
MCP makes it easier to expose tools to AI agents, but tool connectivity is not execution authority. This article separates agent planning from runtime context, authorization, policy enforcement, approval, idempotency, and deterministic execution in enterprise systems.