Chumbo 0.10.2
Adds an optional builder-owned onSurface hook that emits a bounded, canonical, redacted proof after a complete successful tools/list response. The proof captures the effective tool surface without caller identity, scopes, credentials, traffic, or arbitrary protocol metadata, and adds no work when unconfigured.