Design Prompt/Tool Trust Boundaries