Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go

TL;DR : an LLM that calls tools is a client you cannot trust. And it holds your production credentials. The most important rule fits in one sentence.

Source: [Dev.to](https://dev.to/julesrobineau/never-let-the-model-pick-the-tenant-id-securing-an-llm-agent-in-go-o6e)