When the agent 'uses a tool', the model doesn't execute anything. It emits a request. Another system validates it, runs it, and returns the result. That separation changes everything.
An agent doesn't respond in a single pass. It works in a cycle: observe, decide, act, receive a result, and decide again. Here's how the loop works from the inside.