agent-evidence
Validate what an MCP server declares against what it actually does. Declared-vs-observed checks with a tamper-evident SHA-256 evidence ledger.