Last released Aug 16, 2026
The tool call as a security boundary, in both directions - in-process, no proxy, no models, no infra.
Supported by
