Approve an exact purchase, reconcile an uncertain result and recover a worker. Separate external tool protocols from the isolation that constrains their effects.
Read and practice
- Chapter 11: When to ask: calibration, oversight and spending permission (draft chapter, two practice units)
- Chapter 12: Exactly one order: lost replies, retries and idempotency (draft chapter, two practice units)
- Chapter 13: Slow or dead: leases, fencing and crash recovery (draft chapter, two practice units)
- Chapter 14: External tools with MCP: the protocol connects, the application decides (draft chapter, two practice units)
- Chapter 15: Prompt injection and isolation: words steer the model, boundaries hold (draft chapter, two practice units)
