The decision's next step on refusals: deployGate (TOKEN mode) and guardToolCall (receiptVerified) expose the signed next_agent_step carried inside the decision envelope — rendered only when verification succeeds; an unverified envelope renders nothing.
Two new proof binders: bindLangChainToolOutcome (content_and_artifact — the artifact carries the execution proof) and bindCrewAIToolOutcome (result_as_answer on exactly the arms the guard did not permit). Same invariants as the existing four: pure, no framework dependency, no invented result on a blocked branch.
ENFORCING_STRICT notice: constructing with the unversioned spelling logs once per process that ENFORCING_STRICT is the unversioned spelling of ENFORCING_STRICT_V1. The alias resolves to the versioned profile permanently; nothing is deprecated and nothing will be removed.
Dependency: @coderifts/sdk range updated to ^3.10.0 (stays a regular dependency).