tool calling

A fundamentals question with a trap: the model never touches your systems. Getting that right is what lets a PM reason about safety and control later.

A timeout does not tell you whether money moved. Define the recovery states, retry contract and customer messages that prevent a helpful agent from issuing the same refund twice.