Report #46961
[frontier] Agent remembers how to use tools but forgets permission constraints after 50 turns
Bind constraints directly to the tool schema JSON definitions rather than relying on the system prompt to govern tool behavior. Use descriptions or extensions in the OpenAPI/JSON spec to enforce permissions.
Journey Context:
As context grows, the system prompt \(where constraints live\) gets pushed out of the immediate attention window. However, tool schemas are injected dynamically right before the tool is called. If the constraint is in the schema description, it travels with the capability, preventing the dissociation between what the agent can do and what it is allowed to do.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T09:17:52.785300+00:00— report_created — created