MolTrust: "A limit in an agent's system prompt is a request to the model." For Amazon's Ads MCP Server it checks every tool call against a mandate per ad account, and fails closed. https://apis.io/2026/10/26/moltrust-says-a-limit-in-a-system-prompt-is-only-a-request/
1 repost1 like