Fail-closed evidence for LLM tool calls (SHA-256 and MCP) | Heykuki News