The Agent Governance Toolkit's MCP Security Gateway spec defines, in testable RFC-2119 terms, a fail-closed choke point between an agent and its tools — so you don't have to invent one.
Microsoft quietly shipped a conformance spec for the MCP security boundary