[Eduard van Valkenburg (eavanvalkenburg)]

Motivation and Context

Clarify the distinction between function selection and application authorization when using Python tool calling. Applications need actionable guidance on restricting available functions and authorizing model-generated calls before sensitive operations.

Description

Add a tool invocation and authorization section to the Python README covering explicit nonempty allowlists, empty inclusion-list semantics, application authorization and invocation filters, manual approval, and passing the matching function_behavior when manually dispatching calls. Explain that filtering uses current kernel metadata rather than an immutable snapshot of advertised tools.

Documentation only: existing filtered dispatch already rejects nonmember functions before invocation. This change preserves runtime behavior and does not introduce a new authorization mechanism.

Validation:

• git diff --check origin/main...HEAD — passed.
• From python: .\.venv\Scripts\python.exe -m pytest tests\unit\kernel\test_kernel.py tests\unit\connectors\ai\test_function_choice_behavior.py -q — passed, 115 tests. Existing dependency/deprecation warnings were emitted, including an OpenAI client cleanup warning.
• No build, full unit suite, or pre-submission formatting script run; only Markdown documentation changed.

Contribution Checklist

• The code builds clean without any errors or warnings
• The PR follows the SK Contribution Guidelines and the pre-submission formatting script raises no violations
• All unit tests pass, and I have added new tests where possible
• I didn't break anyone 😄

[Copilot]

🟢 Approval recommended

The documentation matches existing filtering and invocation behavior, with no unresolved issues.

No open issues 🎉

What changed in this PR

This documentation-only update clarifies Python tool-calling authorization boundaries without changing runtime behavior.

Changes:

• Explains explicit nonempty allowlists, empty-list semantics, and filtering against current kernel metadata.
• Describes application authorization, invocation filters, manual approval, and preserving function-name filtering during manual dispatch.

File	Description
python/​README.md	Adds guidance on tool selection, authorization, and safe manual invocation.

_{Review effort: Balanced}

[Jose Alvarez (jpalvarezl)]

Documentation accurately distinguishes function selection from application authorization. The nonempty allowlist, current-kernel metadata check, manual dispatch behavior, and invocation-filter guidance match the Python runtime.