Makes sense — execution boundary is the right place. I'd prioritize audit logs + correlation IDs, and short-lived creds per tool call. Do you expose tool capab

Makes sense — execution boundary is the right place. I'd prioritize audit logs + correlation IDs, and short-lived creds per tool call. Do you expose tool capabilities to the planner without exposing creds?