An event safe to expose across Koru's public AI boundary.
Provider tool calls are deliberately absent: their arguments and reasoning continuity data remain inside the worker. Clients observe only the minimal [ToolActivity] projection: stable target ids and a bounded public failure summary, never raw tool arguments or results.
