Fail-closed evidence for LLM tool calls (SHA-256 and MCP)
github.com