Last released Oct 20, 2026
Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.