Valid, and empty
A syntactically perfect query against a label that doesn't exist, or a relationship pointing the wrong way. Zero rows, no error, no signal about which.
A graph and a Cypher prompt turns retrieval into a guessing game. Named traversal tools fix it, and the part everyone gets wrong is the escape hatch. Two of these slides you can click.
It demos beautifully. The model knows the syntax, writes a valid query on the first try, and returns rows. Then you put a real question to it and watch what actually happens.
A syntactically perfect query against a label that doesn't exist, or a relationship pointing the wrong way. Zero rows, no error, no signal about which.
It can't know that MENTIONS is dense and CO_OCCURS is the one worth walking. That's operator knowledge, and it isn't in the schema.
An empty result and a wrong question look identical from inside the loop, so it retries the same shape with different names until the budget runs out.
When something finally returns rows, it takes them. Not because they answer the question, but because they're the first thing that wasn't empty.
None of this is a reasoning failure. It's a navigation failure. ↓
Press run to watch it work the problem.
Same question. Same model.
The model is identical in both columns. Only what it was handed changed.
The agent still decides where to go. The tools decide what a step means, so a step always lands somewhere real.
This is a smaller change than it sounds. The same traversals happen; the difference is that they're written once by someone who knows the graph, rather than re-derived from a schema dump on every run by something that has never seen the data.
This is the right worry, and it's why the generic tool stays in the set. Watch what a curated toolbelt can and can't answer with the escape hatch removed.
With the escape hatch in place, every question is reachable. Two of them only through it.
The pattern generalizes to anything an agent has to search that's larger than its context: give it a closed set of retrieval verbs written by someone who knows the terrain, log every call, and keep one way out.
Signal tools carry which relationships are worth walking. Source documents come back through the same interface, so a citation resolves to a real row instead of a plausible string.
The investigator gets read-only navigation tools over one trace and pulls only the slice each claim needs. Every retrieval is logged, so the evidence path is replayable rather than asserted.
Two different problems. The same answer, arrived at twice. ↓
Knowledge-graph ETL shaped for agentic retrieval, and trust evaluation for the agents that use it. Both start from the same idea: a step should land somewhere real, and you should be able to see where it landed.
The short version: How do you evaluate an agent's tool calling?