Some context:I posted earlier versions of this idea in r/OpenTelemetry (trace topology angle) and r/aiengineering (Telegram bot PoC). Main pushback was around span attributes vs topology-level signals, and whether tool permissions alone are enough. That feedback shaped this version deterministic, no LLM in the loop, fail-closed by default.