Give every tool call a policy gate and signed receipt.
Recent revisions are kept. Restoring one creates a new revision.
