Why Every Agent Vulnerability is a Trust Boundary Failure

Consider these scenariosAn MCP server quietly returning extra tool descriptionsPrompt injection through a calendar inviteAn Agent invokes a tool that the principal should not have access toCost overruns It isn't the model that failed. It isn't the tool that failed. What failed