Read the Loop · Chapter 5 of 8
The model can't run anything. It can only ask, in a format the harness understands. This chapter opens one real request to show what the model is told about each tool, then follows a longer session to see who decides which requests run.