JournalDAY 17 / TIKTOK

FIELD NOTE / TIKTOK

A valid choice can go stale before use.

The complete written thought and the evidence behind it. The video edition will follow its public release.

Journal September 25, 2026 · TikTok target October 14, 2026

A valid choice can go stale before use.

Video caption

A valid choice can go stale before use. The old decision cannot authorize the new tool. Current authority outranks yesterday's model choice. #EricFieldNotes

Full written post / accessibility read

An agent router selects a tool bundle at time one. Before the worker uses it, the bundle's schema or permission changes. The old choice may have been reasonable when made and unsafe now. This is a time-of-check versus time-of-use problem.

In this simulated case, a data-read tool becomes a data-write route under the same friendly name. If dispatch trusts only the earlier decision receipt, it can cross a boundary without asking again. The Avid build describes rechecking route eligibility and tool definitions before dispatch.

Store a fingerprint of the permitted route and tool definition with the proposal. In a disposable test, change one harmless field after selection. Dispatch must reject the stale fingerprint, re-evaluate against current authority and record any fallback.

Treat selection as a proposal. At dispatch, compare the route, schema and permission with current policy; fail closed or choose a logged fallback when they differ. Do this because stale choices should never become durable authorization.

#EricFieldNotes

Four-beat scene transcript

1. A valid choice can go stale before use.

An agent router selects a tool bundle at time one. Before the worker uses it, the bundle's schema or permission changes. The old choice may have been reasonable when made and unsafe now. This is a time-of-check versus time-of-use problem.

Visual: The selector saw one tool version; dispatch sees another.

2. A receipt is not a live permission.

In this simulated case, a data-read tool becomes a data-write route under the same friendly name. If dispatch trusts only the earlier decision receipt, it can cross a boundary without asking again. The Avid build describes rechecking route eligibility and tool definitions before dispatch.

Visual: The old decision cannot authorize the new tool.

3. Bind choice to an eligibility fingerprint.

Store a fingerprint of the permitted route and tool definition with the proposal. In a disposable test, change one harmless field after selection. Dispatch must reject the stale fingerprint, re-evaluate against current authority and record any fallback.

Visual: Change a harmless schema between selection and dispatch.

4. Revalidate at use time.

Treat selection as a proposal. At dispatch, compare the route, schema and permission with current policy; fail closed or choose a logged fallback when they differ. Do this because stale choices should never become durable authorization.

Visual: Current authority outranks yesterday's model choice.

Research and claim limits

The examples identified as illustrative or simulated are design probes, not reported incidents. Vendor specifications do not establish workload performance.

More notes from the work ↗