Compare declared tool-output coordinate labels against exact tool contracts. Bytes, codepoints and tokens are distinct; no tokenizer or unit conversion is used. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Bind call-context contract declarations to the supplied retained tool-contract manifest. Digest coverage does not verify an actual tool schema, implementation or evidence contents. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare retained source-part fingerprints and shared-part ordering between pack manifests. Insertions do not falsely reorder shared parts; no comparison of raw source bytes. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Report missing tool, contract and argument digest declarations in supplied call-context metadata. No arguments, credentials, tool execution or model context is loaded. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Group call-context IDs within an exact run, attempt and contract-digest frame. Separate retries and contract versions; no invocation deduplication or replay prevention is performed. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare pinned call-context revisions for contract, argument, result and status changes. Changes are metadata deltas, not proof of a different invocation or causal explanation. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Inspect call dependency-parent metadata for missing nodes, cycles and links across run frames. No scheduler execution or assertion that a dependency completed successfully. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Bind supplied quote resource pins to exact offer revision manifests. This is declared source coverage, not a live quote, availability, payability or delivery check. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare quote asset and decimal labels with caller-declared per-network asset contracts. Exact integer units only; no exchange rates, token registry fetch or native-USDC certification. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Count joint absence of tool-contract, argument and result pins in supplied context metadata. A missing result can be expected for an unfinished call; no failure or delivery is inferred. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare call-context projections and the relative order of shared calls. Distinguish insertions from reordering; no tool execution, replay or inference about causation. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Group quote IDs within exact offer revision and network frames. Separate chain alternatives; conflicts are metadata differences, not proof of duplicate payments or authentic quotes. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare quote revisions for price, asset, payee, resource and expiry changes in an exact offer/network frame. No automatic acceptance of price changes or new payment signatures. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare declared tool-input bytes and output tokens against caller ceilings, keeping both units separate. No actual payload reading, tokenization or compute-cost measurement. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare closed tool argument-metadata field contracts for request-ingestion breaks. No JSON Schema resolution, arbitrary schema execution or full MCP compatibility certification. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Check supplied quote issue and expiry times at an explicit assessment time, using an exclusive expiry boundary. No trusted clock, issuer authentication or auto-renewal. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare caller-required tool permission-check IDs with satisfied, unsatisfied or unknown declarations. This does not grant access, validate consent or approve a tool call. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Report missing resource, payee, amount and network declarations in supplied quote metadata. No live challenge fetching, wallet address resolution or payment authorization. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Compare receipt asset/network/decimal labels with caller-provided denomination contracts. No token-registry lookup, exchange rate, decimal normalization or financial accounting verdict. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

Inspect declared replacement-quote parent links for missing IDs, cycles and cross-offer/network frames. Does not revoke, refresh or purchase any quote. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.