I don't know but it's something really ought to be implemented by the agents. Is there an agent plugin standard? Mcp doesn't do enforcement like yours does it?