v0.31.0

What's Changed

• Bind free predicateGate EIP-3009 authorizations to the endpoint URL, tool ID and operator, and make eip3009AuthenticatedFetch verify that audience before signing. Add an optional shared replayGuard to enforce single-use identity authorizations.
• Point the Robinhood Chain explorer apiUrl at the Etherscan v2 API (chainid=4663) instead of Blockscout, which returns a Cloudflare 403 to scripted clients.
• Correct the WalletStateAttestationPredicate entry in skill/references/known-predicates.md: the reference implementation's hasAccess takes the issuer's compact JWT as data, and a check costs about 130,000 gas.

Community Contributions

• WalletStateAttestation proof format correction, thanks @douglasborthwick-crypto (tool-sdk#29)

Full Changelog: v0.30.1...v0.31.0