#Tool Use

Keep delegated authority and approval outside model-generated text, and test the boundary with adversarial inputs.

Bound a tool loop, distinguish failure from uncertainty, and recover without duplicating external effects.

Resolve a support case with evidence, account permissions, clear escalation, and verified outcomes.

Turn a proposed tool call into a bounded operation with explicit permissions, approval, and recovery.