How would you describe them?
A verification skeleton that runs before an MCP tool call — five-tier provenance lookup, never generates values, and one remaining unknown means it records instead of executing.
