Question 500
A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions. Which TWO complementary actions identify the appropriate response AND the evidence needed to verify it? Select TWO.
Explanation
Correct Answers
Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. These observations test the stated cause before the team changes a system or policy. A model can propose a function call but does not itself possess the right to change a database or purchase goods. The most suitable approach is: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. This is the verification part of the requested pair. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.
Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. This approach directly addresses the decision boundary. A model can propose a function call but does not itself possess the right to change a database or purchase goods. Validate key assumptions using: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. This is the implementation part of the requested pair. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.
Incorrect Answers
Inspect whether the task concerns exploratory prompting or a configured multi-step agent, tool authorization and release process. This step is associated with Agent Studio versus Google AI Studio environment selection, but it is not one of the two complementary requirements here. The intended response and verification are: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. Plus: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.
The AI service maintains layered controls against representative misuse, with findings assigned and mitigated. This step is associated with Secure AI Framework risk categories and defense, but it is not one of the two complementary requirements here. The intended response and verification are: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. Plus: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.
Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. This step is associated with Cloud Run and Cloud Functions as agent tool endpoints, but it is not one of the two complementary requirements here. The intended response and verification are: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. Plus: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.


