Back to catalog / Agent safety
Verify stored tool calls were not tampered with before resuming an agent run
When a paused tool call will execute on resume, validate its stored arguments and block tampered calls.
Goal
Protect confirmed or resumable function-tool calls from changed arguments in a modified session store.
Steps
- List calls deferred for confirmation, authorization, or resume and assess write access to the session store. [integrity]
- Register
ToolCallIntegrityPlugin(secret_key=load_key())inApp(plugins=[...]); load a 32-byte-or-longer random key from a secret manager. [integrity] - Restrict key sourcing and rotation; do not place the integrity key where session editors can read it. [integrity]
- In an isolated test, alter a stored call’s arguments and confirm validation fails before the handler runs. [integrity]
How to verify
Tampered calls are rejected before side effects; valid calls resume, and the key never appears in logs.
Troubleshooting
The plugin may not cover tools used directly as workflow nodes; add node-level protection for that documented limitation.
Permissions
Prerequisites
- Python 3.11+, google-adk compatible with the pinned revision, and an isolated test environment
- Configured model-provider credentials for live inference; never place them in code or logs
Permissions
- Use authorized test data only; isolate sessions and credentials per user; obtain human authorization before external side effects
Limitations
This procedure follows Google ADK at the pinned revision; other versions, models, or remote services may differ in APIs and event semantics. Recheck permissions, retention, and recovery before production.
Pinned upstream source
- Repository
- google/adk-python
- File path
- docs/guides/plugins/tool_call_integrity_plugin/index.md
- Pinned commit
e9b74d36140f2594b24c481fb7a3825b2cb01e96- Source checked
- 2026-10-14 · Reviewed against the pinned upstream source
Repository metrics
These values describe the upstream repository, not popularity or likes for an individual skill or playbook.
- Stars
- Not collected
- Forks
- Not collected
- Observed at
- Not collected
No metrics snapshot is available yet.
License: Apache-2.0
Main topic
Make Agent behavior safer and easier to verify