Filed under ai-security.

Code-as-action: the pattern that quietly ate the tool-calling loop

Three vendors converged on the same answer in six months: let the model write code, not tool calls. The pattern is genuinely good — and most agents don't need it yet.