pf-effects
Append-only ledger of every irreversible tool call an agent makes, with
per-call idempotency keys and an HMAC chain that defends against
semantic-rollback attacks (ACRFence, arXiv 2603.20625). See
agent_docs/effects-layer.md for the spec.