Enforce cryptographic identity, least-privilege execution, and verifiable audit trails at the agent tool boundary.