Model Mechanics
Today
Explore
Practice
Library
Exam
Certificate
Search
⌘K
ខ្មែរ
◐
Sign in
Today
Explore
Practice
Library
Profile
Function Calling: A Proposal, Not Execution
Today
3. Tools, Agents, and Protocols · 2 of 4
Mark read
Prev
Next
Orient
A tool call crosses several trust boundaries
Trace one refund without trusting the model
Predict
Make a refund executor safe under hostile input and retry
Close
Practice
Related
Function Calling: A Proposal, Not Execution
Intermediate
☆
📑
Schema-valid arguments can still be wrong, unauthorized, or dangerous
Orient
A tool call crosses several trust boundaries
Trace one refund without trusting the model
Predict
Make a refund executor safe under hostile input and retry
Close
Practice
Related
Practice activities and scenarios are optional. Mark the lesson complete after reading, and return to practice whenever it helps.
Restoring your saved work…
07
Optional practice
🧠 Optional scenario practice
Q1
A tool call matches its JSON schema but attempts to refund another customer’s order. What check is missing?
A
A stricter order-ID regular expression, because a valid identifier format is enough to establish that the caller owns the order
B
Resource ownership and authorization in the trusted executor
C
A system-prompt reminder to use only the current customer’s orders, treated as the final authorization boundary
D
A second model call asking whether the first tool proposal appears ethical, without querying the authenticated resource owner
Q2
Why should a money-moving tool accept an idempotency key?
A
So the model can reuse a previously authenticated request without the executor checking current policy or resource ownership
B
So a retry can vary the amount while the payment service groups both requests into one conversational turn
C
So logs can correlate requests, even if the executor still performs the financial side effect every time the network retries
D
So retries can return the existing result instead of repeating the side effect
08
Up Next
Intermediate
Execution Owners and Trust Boundaries
Advanced
MCP and Delegation: Two Different Architecture Problems
Beginner
Multimodal Inputs: More Than Text
📝 Notes
Mark lesson complete
Next: Execution Owners and Trust Boundaries →