Preprint Open access
When Valid Tool Calls Change Meaning: Formation-Consistent Dispatch for LLM Agents
Tool-enabled agents form calls from model-visible interfaces, while hosts later select their implementation. Standard dispatch omits the descriptor-handler relation. An unchanged and schema-valid call can therefore acquire a different security effect during rollout, reconnect, or delayed approval. We call this failure …