Skip to main content
Tool results are untrusted input. They often contain retrieved documents, browser text, database rows, or API responses. Averta checks them before they re-enter the Anthropic tool loop.

Continuation Shape

The wrapper evaluates tool results when the final user message is a pure Anthropic tool-result continuation:
That continuation call runs the tool-result checkpoint before Anthropic sees the returned content.

Pure Means Pure

The final user message must contain only tool_result blocks. This is valid:
This fails closed because it mixes tool results with extra user text:
If you need to add user text, send it as a separate later user turn after the tool continuation has completed.

Supported Content

Tool-result content can be:
  • a string
  • an array of text-only content blocks
Non-text tool-result content blocks fail closed before provider execution.

Block Behavior

If a tool-result decision is block:
  • the wrapper throws AvertaSdkError
  • the continuation request is not sent to Anthropic
  • the model does not see the tool output

Decision Callback

Debugging