Tool calling: System design

Separates model proposals from runtime authorization: approvals bind high-impact actions, while idempotency only prevents duplicate execution and never grants permission.

发布于 Sep 12, 2026