How should an application return tool results to the model?

I preserve correlation across the model request, tool call, dependency trace, tool result, and final response. Large results are filtered or summarized deterministically before reuse. When detail is still required, I page the result or pass a controlled reference rather than dumping an unbounded document into context. Returned documents can contain hostile instructions, so tool output cannot expand permissions or alter higher-authority application policy.