Tool calls, checked
Which tools, in which order, with which arguments, and nothing else. A call that failed does not count as done.
Check what your agent does, not only what it says. A YAML spec, the agent you ship, and an exit code that gates the merge.