التفويض والهوية في استدعاءات الأدوات

في هذا الدرس

make every tool call run as the end user.

الموضوعات المخطط لها

• The tool call carries the customer's token (from the session), never a shared service account.
• The downstream service checks ownership exactly as it does for the customer's own request.
• Never put the user id in a model-controlled argument; take it from the authenticated context.
• Whether an action is allowed is decided by code and policy, never by the model's judgment ("the user seems entitled").