An AI agent can generate a valid tool call and still have no legitimate identity behind the action.

Consider a refund tool:

{

"order_id": "ORD-1042",

"amount": 800,