A tool call is a request slip, not an action.

Function calling has three parts: you describe the tools, the model replies with a structured request (a tool name plus arguments), and your program checks and runs it. The model's whole contribution is that small piece of structured data. Everything that actually happens, and any result, comes from code you control.

Read it once, then a question tests whether the trick stuck.