auth for tool calls is where a lot of agent security quietly falls apart
the agent acting as a shared service account means you lose per user permissions. we pass the user identity through to every tool call now. it is more work and it is correct.
do you have a repo or gist? would love to poke at it
more posts like this please
what is the smallest model you got this working on
had no idea you could do that, mind blown
great writeup, bookmarked
how are you handling auth for the tool calls?
finally someone said it
my team is going to hate me for sending them this
i love that this is just practical and not hype
the answer is always evals isnt it
i was just about to ask this exact question
what tooling are you using to trace this?
what is the failure mode when the tool call times out?
did you compare against the obvious baseline?