Tool Catalog Review: Support Evidence

Catalog Boundary

The policy role receives active-policy search and source lookup. It receives no account tool or write capability. Every tool has a tenant-aware execution scope.

Tool Contracts

search_active_policy: use when a support policy governs the answer; do not use for account facts or public research. read_assigned_account: use when the authenticated case needs account facts; do not use for policy or other tenants.

Error Matrix

Validation is retryable only after changed input. Authorization is non-retryable until access or approval changes. A dependency timeout is retryable once and preserves any partial result plus trace ID.

Progressive Discovery

The starting surface exposes search for capability names allowed to the role. Specialized definitions load only after scoped discovery; restricted names are not revealed.

Authorization

Discovery never grants execution. The service checks principal, tenant, current scope, object ownership, and bound approval for every call.

Selection Fixtures

Twelve fixtures cover policy versus account questions, public research, no-tool answers, validation, authorization, conflict, timeout, and partial results.