In engineering practice, the control point is usually called the Policy Enforcement Point (PEP), paired with the Policy Decision Point (PDP); the PEP sits on the link between the agent and the tools (such as a tool gateway, an MCP server proxy, or unified tool-call middleware) and is responsible for asking the PDP whether a call is allowed before each call is issued and allowing or denying it accordingly.