@hy-sde-org/dsh-tool-av

Model-facing Automic Vault tools (av_scan audit, av_doctor hardening check, av_catalog, av_list) over the host ctx.av service — read-only, never returns secret values — plus an av:tools system-prompt section; standalone, no harness changes required.