Intent Cloak: query-intent privacy for agents

The three tools have mostly distinct roles: running a cloaked task, retrieving the last exposure receipt, and verifying a receipt signature. There is slight overlap because cloak_run already returns a signed exposure receipt, making the separate exposure_receipt tool potentially confusing in when to use which.

All names use snake_case, but the patterns are mixed: cloak_run is a domain-specific action, exposure_receipt is a noun phrase, and verify_receipt is verb_noun. It remains readable, but there is no single predictable naming convention across the set.

Three tools is well-scoped for a narrow privacy and receipt-verification service. Each tool corresponds to a core operation in the workflow: run, retrieve receipt, and verify.

The core lifecycle is covered: execute a cloaked task, obtain the exposure receipt, and verify its signature. Minor gaps exist around listing prior receipts or account/billing management, but these are not essential for the stated purpose.