Treat model-generated tool arguments as untrusted input.Documentation Index
Fetch the complete documentation index at: https://docs.ai-stats.phaseo.app/llms.txt
Use this file to discover all available pages before exploring further.
Safety checklist
- Keep tool schemas minimal and explicit.
- Validate parsed arguments before execution.
- Allowlist tool names; reject unknown tools.
- Add timeouts and retries for external calls.
- Log call id, tool name, and validation failures.
Request validation example (TypeScript + Zod)
Failure strategy
If validation fails:- Do not execute the tool.
- Return a controlled error payload into the next model turn.
- Ask the model to retry with corrected arguments.
Streaming note
For now, keep tool-calling requests non-streaming (stream: false) to satisfy gateway request validation.