Strands Agents SDK for Python 1.54.0

Apply the Python 3 baseline first. Use these rules for strands-agents==1.54.0 on maintained Python 3.10–3.14 releases; the experimental Nova Sonic integration requires Python 3.12 or newer. Verify optional provider dependencies against the deployed interpreter. Do not assume behavior from later SDK releases.

Agents and instruction boundaries

• Construct Agent with a trusted system_prompt, explicit model configuration, and a reviewed tool list. Review tools added by sandboxes, memory managers, plugins, and context management as part of the effective capability set.
• Accept end-user text or narrowly validated content and build conversation history in application code. Treat messages, non-string invocation inputs, snapshots, interrupt responses, and checkpoint resumptions as privileged inputs; caller-authored history can cause direct tool dispatch without a model decision.
• Preserve the lower trust of retrieved documents, MCP content, memory, summaries, and delegated results. Do not promote their instructions into system_prompt, authorization state, tool configuration, or approval decisions.
• Use structured_output_model for output shape, then validate business invariants and authorize any operation selected by the output. Apply the same checks to streamed and delegated answers before sensitive use.

Tool validation and execution

• Keep load_tools_from_directory=False; enabling it imports and watches ./tools/. Resolve tool names, modules, file paths, plugins, and hooks exclusively from trusted deployment configuration.
• Give @tool functions