assay-cli 5.2.0

Policy-as-code gate for MCP agent tool calls, with verifiable evidence and Linux kernel enforcement.