Consequential authorization and execution must be enforced outside the language model.

OAuth and conventional authorization rely on deterministic resource-server enforcement.

MCP requires servers to implement access control and input validation rather than trusting model behavior.

CaMeL obtains scoped guarantees by enforcing policy in a separate interpreter and capability layer.

External enforcement adds latency, implementation effort, and policy-authoring burden.

Some low-risk read-only use cases may accept lighter controls.