The Model Asked, the Tool Said No
Access control belongs below the prompt: filter before ranking, one error message for ‘missing’ and ‘forbidden’, identity from the caller. Plus the three false alarms my own security scorer raised.
Index / term
Access control belongs below the prompt: filter before ranking, one error message for ‘missing’ and ‘forbidden’, identity from the caller. Plus the three false alarms my own security scorer raised.
An agent looked 12/14 vs 7/14 on a blind set I had quietly reused. On a freshly frozen set it tied single-shot RAG at 10/12—at three times the cost.
Three Qwen3 tool-calling masks: all assistant turns, first call without a terminator, then the terminator—and only the last one worked.
A 50-step math adapter beat a 600-step one, and ViT-Large was best after one epoch—on a single Colab A100.
Flash Attention, mixed precision, DDP, shards, checkpointing, and HellaSwag without pretending I trained GPT-2.