LLM relays can read prompts and rewrite tool calls. Use this evidence-based audit contract before production data or agents cross a proxy.