<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Tool Calling on DataAgentX</title><link>https://e343c64b.dataagentx.pages.dev/en/tags/tool-calling/</link><description>Recent content in Tool Calling on DataAgentX</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Wed, 09 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://e343c64b.dataagentx.pages.dev/en/tags/tool-calling/index.xml" rel="self" type="application/rss+xml"/><item><title>Why Agent-Generated SQL Must Not Run Directly</title><link>https://e343c64b.dataagentx.pages.dev/en/tech/20260909-controlled-tool-execution/</link><pubDate>Wed, 09 Sep 2026 00:00:00 +0000</pubDate><guid>https://e343c64b.dataagentx.pages.dev/en/tech/20260909-controlled-tool-execution/</guid><description>&lt;p&gt;A model that emits SQL has proposed an action; it has not earned production execution authority. Even a &lt;code&gt;SELECT&lt;/code&gt; can scan terabytes, expose sensitive columns, invoke an external function, or return a plausible result after an incorrect join.&lt;/p&gt;&#10;&lt;p&gt;The execution layer converts model intent into a controlled operation: validate before running, constrain during execution, verify afterward, and retain evidence for every side effect.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://e343c64b.dataagentx.pages.dev/images/articles/controlled-tool-execution/core-en.svg"&gt;&lt;img src="https://e343c64b.dataagentx.pages.dev/images/articles/controlled-tool-execution/core-en.svg" alt="The execution gateway control chain from action proposal to audit"&gt;&lt;/a&gt;&lt;/p&gt;</description></item></channel></rss>