Overview
A production agent should not receive execute_sql, run_query, update_any_table, approve_proposal, or commit_proposal tools in the Synapsor path.
Expose reviewed business tools instead: inspect an invoice, inspect a ticket, propose a late-fee waiver, propose a ticket resolution, or propose a refund review.
Semantic tools keep table names, tenant scope, visible columns, write columns, conflict guards, and approval policy in the reviewed Synapsor contract.
Developer notes
- Keep trusted values out of model-visible arguments.
- Give every write tool a proposal boundary.
- Do not expose approval or commit as model-callable tools by default.
- Return evidence and replay handles from important tool calls.