PRODUCTION SCENARIO
A Foundry agent has a read-only stock lookup tool and a reservation tool that holds inventory. Users mostly ask availability questions, and sometimes do want a reservation.
Which design keeps the agent from reserving stock nobody asked for?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: Require explicit user approval before the reservation runs
Microsoft's tool guidance is to allow only known operations and require user approval before consequential actions, avoiding side effects unless you intend them. Detaching the tool removes a capability the agent genuinely needs when users do want a reservation. A clear description improves which tool the model picks but is not an enforcement boundary. Idempotency stops a repeated call creating a second hold, not the first unwanted one.