HMAC-SHA256 signature binding this approval to its tool call (v6.0.202). Present only when the agent is configured with experimental_toolApprovalSecret; verified fail-closed when the approval is replayed.
experimental_toolApprovalSecret