Agent Verifier

There is only one tool, so there is no possibility of confusing it with another. Its purpose (self-diagnosing how the current request looks from the outside, including Web Bot Auth signature verification) is unambiguous.

A single snake_case name, self_check_web_bot_auth, that clearly encodes subject (web bot auth) and action (self check). With one tool there is no convention to break.

One tool is thin against the 3-15 heuristic, but the server's scope is a single diagnostic operation, so a solo tool is genuinely well-matched rather than an oversight. It is not a trivial stub; it returns verification status, key directory facts, faults, and address data.

For its stated narrow purpose the tool covers the full diagnostic loop: it works signed or unsigned and reports verification result, directory contents, fault text, remediation sentence, and caller-address facts. No obvious dead ends, though there are no companion operations (e.g. re-checking after a config change or inspecting a different request).