immutability 1

Pins a tool call to the identity it was approved with. The registry hands tools/pre-execute listeners the live execution object and documents name/agent/parent/callId/signal/token as readonly, while the object is a plain writable literal with only the arg