Thesis
Tool calling becomes product behavior the moment it touches user data or external systems.
Notes
That means tool calls need contracts, retries, permission checks, and traces. A good agent loop should make action visible before it makes action autonomous.
Working Claim
Autonomy is not a boolean. It is a set of permissions that should be granted deliberately.