Features / Tools

A model cannot grant itself a tool.

Tool access is part of the workflow design. Name the capability, scope it, and keep consequential actions under explicit control.

Capabilities are specific

Reading a file, running a command, controlling a browser, and changing a provider are different permissions.

Bridge permission, operating-system access, service credentials, network policy, and human approval can all apply.

For important work, retain the request, selected tools, material changes, verification evidence, and final authorization.