Verify one OpenAI Agents SDK tool boundary before release
Test one existing Python Agents SDK FunctionTool against approved and denied arguments, then review an authorized staging effect, trace and usage for a bounded accept-or-hold decision.
The big change
What changed: The SDK's function-tool input guardrail can reject a proposed call before the selected Python tool body executes. This recipe binds that gate to the existing agent's code, configuration and dependency state.
Why it matters: A scripted allowed call and same-schema denied call can establish whether the local SDK path executes the selected tool. Only an independently observed staging effect can establish what the real action did.
What to watch: The owner must see the actual trace, effect and output, plus usage evidence for every provider response. An SDK token total of zero can also mean the provider omitted usage; missing evidence ends in HOLD.







