tools

Two allowed actions can still be the breach

Per-tool permission is not an architecture. The control is which combinations you will not allow in one session.