Who a run is: the identity a chat or one of its workers carries in its memory binding and that tool.call forwards to extensions as caller. An identity, not a secret and not a proof of who calls.
tool.call
caller