Scored across 15 tools
Most tools target clearly distinct operations (create/modify/canonicalize/merge/extract/inflate/CRC), and descriptions explicitly cross-reference when to prefer one over another. The one soft spot is the read-only inspection cluster — inspect_zip, list_zip_entries, verify_zip and scan_zip_forward all report on an archive, and inspect_zip already performs eager structural validation that overlaps conceptually with verify_zip, so selection requires careful reading rather than being instantly obvious.
Every name is snake_case with a leading verb and an object noun: inspect_zip, list_zip_entries, read_zip_entry, verify_zip, extract_zip, create_zip, modify_zip, canonicalize_zip, merge_zip, compute_crc32, sanitize_entry_paths, describe_engine, draft_governance_issue. The pattern is predictable and the verb choice telegraphs the action.
15 tools sits at the top of the well-scoped band and each one covers a genuinely different lifecycle stage (inspect, list, read, verify, extract, create, modify, canonicalize, merge, plus utilities). Nothing looks redundant or padded; even the odd-seeming draft_governance_issue is a deliberate, documented HITL workflow.
Coverage is unusually thorough: full read/write lifecycle, compaction, determinism rewriting, merging, path sanitization, CRC utilities and engine introspection, with removal reachable via modify_zip. The notable gap is encryption — encrypted entries are explicitly refused rather than decrypted — and there is no tool to list or delete files already written to the sandbox output directory.