Unverified50% confidenceFactExact time
reskSecure enforces the allowlist at the boundary, at a point earlier than when tool definitions are handed to the model, rejecting everything outside that set, so the model cannot see tools it has no right to call.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/14/2026
First Seen
Valid until: 1/12/2027
Sources
Related Entities
Related Claims
UnverifiedWhen the defer_loading parameter is set to True, the tool is completely invisible to the model, and it only enters the model context when the Tool Search Tool finds it.64% similarUnverified工具调用引入了调用顺序、权限验证、数据访问范围等过程性安全因素，这些在最终输出中往往不可见63% similarUnverifiedAttributing a technology stack solely based on model identifiers intercepted from front-end network requests has limitations, because identifiers may be wrapped by intermediate layers.63% similarUnverified将推理链隐藏在API后端并不等于真正保护它，只要模型行为可被外部观测和大量查询就存在被逆向工程的空间61% similarUnverifiedWhen a tool call is triggered three times, it could be the model retrying itself, the framework's retry policy, or the tool registry's idempotency handling—all three layers are suspects but they cannot be distinguished in the logs.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1026994API
curl https://kongchang.com/api/v1/knowledge/claims/1026994MCP
get_claim(id=1026994)