Token efficiency, performance, observability, and most importantly: permissions/security policies