Unverified50% confidenceOpinionExact time
Writing spending rules into the system prompt is not a control measure, because the prompt is a suggestion to the model, not an enforcement point, and no mechanism can stop a tool call that ignores it.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSystem Prompt与用户输入本质上都是模型的输入token，模型并不存在独立的规则执行引擎来强制保证指令被遵守74% similarUnverifiedIn tool calling, the model itself does not execute code but is only responsible for deciding which tool to call, while actual execution authority remains in the host program controlled by the developer.68% similarUnverifiedA Prompt Handler is essentially a single tool-free LLM call that can only respond based on the text content it receives and cannot actively read files or execute commands.62% similarUnverified全权限模式不能通过快捷键切换，需要通过特定的命令行参数来启动62% similarUnverifiedWhen a policy determines that a request is not permitted, OpenController directly rejects the call in the request path, using inline enforcement rather than post-hoc auditing62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1005624API
curl https://kongchang.com/api/v1/knowledge/claims/1005624MCP
get_claim(id=1005624)