A tool returns: {"is_error": true, "error_code": "AUTH_REVOKED", "message": "API credentials have been revoked", "retryable": false, "escalate": true}. What is the correct response?
Answer: Surface the error to the user, stop the loop, and trigger the escalation path — human intervention is required
A fatal error with retryable: false and escalate: true signals that the tool cannot be used until a human intervenes to restore credentials. Retrying (A) will fail every time — credentials don't refresh automatically. Asking the user (B) confuses end-user with operator responsibilities; API credential management is not a user action. Switching tools (D) doesn't address the authentication failure — if credentials are revoked, all tools using those credentials will fail. The correct action is to stop the loop, surface the error clearly, and trigger whatever escalation mechanism the system has (alert, ticket, page on-call) so the credential issue can be resolved.