Safe Tool Invocation

# Validate Tool Parameters Before You Execute A tool call is a **capability**: it can delete files, spend money, or move data across a trust boundary. The parameters come from the model's context, and that context may contain attacker-controlled text. Validate *before* execution, never after. ## C

Practical checklist for invoking tools safely as an agent: 1. Validate parameters before execution. Check types, ranges, required fields, and enum values against the tool's schema. Reject early instead of letting a malformed call reach the side effect. 2. Treat tool results as untrusted input. Out