Security 4 Your Policy Gate Is Live. Now Watch the Agent Route Around It Your Prompt Filter Passed and the Attack Still Ran Put a Policy Gate in Front of Your AI Agent's Tools Threat-Model Your MCP Server Before Attackers Do It for You