[xandreeddev]

What

• Add optional ToolInterceptor after original authorization: Allow, Deny, Rewrite or Respond before calls; Keep or Replace afterward. Validate detached encoded evidence, reauthorize rewrites and preserve authored codecs, admission, actual handler events and breaker accounting.
• Journal validated decisions with loop/direct ownership. Record one effective raw answer with exact invocation and rewritten input before views or digests. Interrupted callbacks retain honest unanswered-call state; recovery does not automatically repeat handlers or hooks.
• Advance stored format to 14, extend the shipped registry kit, and add isolated invocation receipts through the existing loop/registry/memory boundaries. Grant discovery the internal protocol dependency without adding external dependencies or erasure exemptions.

Checks

• Frozen install, typecheck, foundry checks/demo, package build, packed Node/Bun verification, clean regenerated docs, website and Bun 1.3.6 proxy rerun: pass.
• Full source suite: 3,471 pass, 4 environment skips, 0 fail.
• Packed registry kit plus all 17 directory recovery flags pass on both runtimes, including rewritten typed views, held ACKs, cancellation, SIGKILL and cold replay without automatic handler/hook execution.
• Released journals and all existing goldens remain exact. Five prior development conversations and stored history through 13 are unchanged; a sixth records two interception phases and one effective result.