Tool Use Mechanics

Despite the name, 'function calling' means the model emits text — a structured tool_call object with a function name and JSON arguments. Your code parses it, executes the real function, and appends the result back into the context as a tool message. Then the model continues.

The model's only power is writing the request. Every security boundary, timeout, and permission check lives in your harness.