Part 3 — Secure Tool Calling & Guardrails

Prerequisite: AI Security requires a different mindset compared to traditional Web Security. Please refer to Comprehensive AI-Native System Architecture to understand the system context before diving into Tool Calling. In Part 2, our Agent achieved perfect memory. But a good memory alone isn’t enough; the true power of an Agentic System lies in its ability to Take Action by calling Tools. However, granting an AI access to a Database or Email implies opening the door to unprecedented attacks. ...

May 20, 2026 · 5 min · Lê Tuấn Anh

Active RAG & Strict Tool Calling With Real-time APIs

In Part 3: Qdrant Hybrid Search - Solving Semantic and Hard Filters, we successfully built a powerful Hybrid search engine combining Dense Semantic and Sparse Lexical Search. However, a practical e-commerce search system goes far beyond merely retrieving static documents from a vector database. For example, a user asks: “I want to buy a 400L Samsung Inverter refrigerator available at the District 1 branch that has an active promotion.” If we rely solely on a Vector Database, we face two critical errors: ...

May 22, 2026 · 8 min · Vesviet Team