ToolReplay

Dependency-free CLI that strictly parses agent tool-call transcripts, detects replay divergence and permission overreach, and emits deterministic reports with tamper-evident hashes.