How are teams thinking about security for LLM agents right now?

Not just prompt injection, but things like:
- tool misuse
- unexpected behavior across multi-step workflows
- agents calling other agents

Feels like most tools focus on output filtering, but not behavior.

Are people doing runtime validation / monitoring for this?
Or mostly internal solutions?