Runtime allowlist and policy for agent tool-calls, enabling security scanning (e.g., TODO/FIXME/XXX findings) via MCP for AI agents.