Guardrails for Agentic AI: Least-Privilege Tools, MCP Safety and Evaluation in CI
AI agents that call tools through MCP and read private data fail in ways demos never show: over-permissioned tools, prompt injection, answers without sources and silent regressions. This talk walks through a practical guardrail stack for production agents.
We cover least-privilege tool and MCP server design, retrieval with citations, an evaluation suite that runs in CI, human approval gates for risky actions, and observability for audit. Attendees leave with a checklist and reference architecture they can apply to their own agents.