Resources
What we are building, and what we have learned building it.
Filtered by tools · show everything
September 2, 2026
Your permissions hold right up until the model calls a tool
Almost everyone gets retrieval scoping right. The agent cannot read the wrong customer's documents. Then it calls a tool, and the tool goes and fetches them, because the tool runs as your service account and nobody re-checked.