Paste the system prompt and the tool list.
Score each tool and draft input/output filters.
Export the report. You still set the allowlist; this is not a live firewall.