Unverified50% confidenceReleaseExact time
v0.23.0 fixes state cross-contamination of nested Agent tools across multiple runs and scopes function tool approvals to their owning Agent.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/4/2026
First Seen
Valid until: 1/2/2027
Sources
Related Entities
Related Claims
Unverifiedv3.23.0 adds the ability to expose typed app actions as Agent tools (#4006), currently in beta.76% similarUnverifiedAdding permission constraint rules in the system prompt cannot truly solve the Agent privilege escalation problem, because the underlying API calls always carry the Bot's own credentials.71% similarUnverifiedAgentScope encapsulates the Function Calling process so that developers only need to register tool functions, and the framework automatically handles parameter validation, type conversion, and error retries.71% similarUnverifiedAgent API clients can no longer directly control the detailed behavior of the underlying model, as the trade-off for gaining the platform's ability to flexibly combine retrieval tools.70% similarUnverifiedAgent开发中常见问题包括Agent陷入死循环、工具调用参数格式错误、多Agent协作职责混乱70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/972064API
curl https://kongchang.com/api/v1/knowledge/claims/972064MCP
get_claim(id=972064)