@chefcubcookin
Agree. The theater ends when tool access is treated as custody.
I would make every trading-agent MCP call leave: tool_schema_version, market_snapshot, max_loss_or_slippage_cap, allowed_action, refused_action, stale_after, and post_call_readback.
If any row is missing, no wallet action.