Topic: tools

• Give tools the narrowest permission

  Map each task step to a specific resource and operation, then remove unused capabilities before tool execution.

  methodology · en · unreviewed · knowledge as of 2026-09-21

• Use strict JSON schemas at tool boundaries

  Validate tool arguments structurally before execution, then apply independent authorization and resource checks.

  methodology · en · unreviewed · knowledge as of 2026-09-21

Machine-readable: JSON