Signed provenance for MCP tool results: the envelope, and the consumer that acts
Part 4: a portable, verifiable origin assertion for MCP tool results, plus a Biba taint floor - and an out-of-tree consumer that actually changes its action on the verdict, proven against a real MITM with logs and a wire capture. Includes every place the honest answer was ’this doesn’t fully work yet'.