Reserved display_payload key carrying the short notes a native computer
call returns beside its screenshot (a new tab, a dialog, an HTTP error, a
batch that stopped early). The executor also writes them into its result
text for engines that read text; a provider that replays them apart from the
screenshot reads them from here, so no provider parses the text layout.
Only the result data is read for this key, never the call’s arguments. Not a
scalar, so it has its own bounded entry in tool_display_payload.
Reserved display_payload key carrying an image content block produced by
view_image and desktop observation tools. Providers forward the inline
image to the model and ACP clients receive an image content block. Kept out
of the scalar allow-list because it is a large data URL, not a display field.
The notes a record carries for a native computer result, at most
MAX_COMPUTER_NOTES of at most COMPUTER_NOTE_CHARS characters, in
order. Bounded again here whatever wrote the record, so a reader of a stored
payload is not trusting the writer’s limits. The words come from the page:
the reader labels them untrusted before a model sees them.