How do you design safe tool calling (function calling) in AI agents?

Tool calling must be constrained and authorized. Best practices: - Allowlist tools and validate arguments - Require confirmations for destructive actions - Enforce permissions server-side - Log tool calls for auditing Never let the model directly execute privileged actions without validation and policy checks.