{
  "artifact": "tool-integration-spec",
  "fields": ["name", "purpose", "inputSchema", "outputSchema", "permissions", "idempotencyKey", "rollbackPath", "auditFields", "errorMap"],
  "requiredControls": ["dryRun", "rateLimit", "approvalGate", "traceId", "rollbackOwner"],
  "gate": "No AI-callable tool enters production without typed contract, permissions, idempotency, error map, rollback, and audit trail."
}