An assistant can query inventory and place orders.
Queries may be automatic, but purchases require user intent and budget review.
Choose two designs.
Separate read and change permissions, validate tool arguments and user authorization, and require approval before high-impact changes.
Detailed explanation
High-impact actions have an approval boundary.
High-impact actions have an approval boundary.
Model errors and injection are constrained.
Model errors and injection are constrained.
Model output does not replace authorization or approval.
Model output does not replace authorization or approval.
Unsafe targets or quantities can be passed.
Unsafe targets or quantities can be passed.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 2.3のツール利用、Guardrails、認可を確認する。Expected result
モデルの提案と、実際の外部操作の認可・承認を分離できる。Key points
- Tool permission
- Argument validation
- Approval
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.