Authorize tool batches only after verified response completion
When an OpenAI Responses consumer dispatches tools after stream iteration, EOF must not authorize execution. Require a successful terminal response and completed JSON object arguments for every tool before releasing any tool events. Reject the whole batch if one item is unfinished, malformed, or inconsistent with the final snapshot. This prevents valid early tools from mutating state before a later invalid tool is discovered. Pipecat can otherwise turn missing or malformed arguments into an empty object. Preserve prompt text streaming, cancellation, and explicit fresh recovery; do not infer provider success from transport closure. Strict snapshot consistency can reject nonconforming compatibility proxies. Applies when: streamed model output authorizes side-effecting tool batches. Keywords: OpenAI Responses Pipecat EOF tool arguments terminal batch validation