original publication

ToFu preprint studies LLM orchestrator tool trust boundary and MCP security