An AWS engineer walks through agents that generate and register their own tools on the fly, with the guardrails needed to make that safe in production.