This tool registry shipped in a Friday PR. Over the weekend the agent
reran jobs 31 times — including a deploy job, twice — and no confirm
gate ever fired, because rerun_job is registered as if it were
read-only.
Fix the registry so an unconfirmed rerun is rejected. Don't touch the validator — the bug is in the contract, not the enforcement.
Expected output:
rerun unconfirmed reject: needs confirm
rerun confirmed ok
log read ok
The break is on line 3 — but read the whole snippet first.