Pre-open repo agent-surface audit

Each tool maps to a distinct operation: cached verdict lookup, fresh audit, audit-plus-sanitised copy, and receipt verification. The main overlap is between preopen_audit and sanitise_tree, which both audit a tree; the descriptions differentiate them by output (verdict vs quarantined copy) and pricing, but an agent must read carefully to pick correctly.

All names are snake_case and mostly verb_noun (lookup_verdict, sanitise_tree, verify_receipt). preopen_audit breaks the verb_noun pattern slightly since 'preopen' is a modifier rather than a verb, but it remains readable and predictable.

Four tools is compact and well-scoped for an audit service: lookup, audit, sanitise, verify. Each has a clear, non-redundant role and there is no filler.

The core lifecycle is covered — run an audit, retrieve a cached verdict, get a sanitised copy, verify a signed receipt. Minor gaps exist around obtaining/listing receipts and any policy or batch management, but agents can work around these via the audit tool's outputs.