One connector call, as seen by tool-boundary policies.
Connector id declared by the tool.
Hostnames the connector's manifest declares it calls.
Validated connector input.
Optional
Trusted per-call context supplied by the host, when available.
Side-effect classification declared by the connector.
One connector call, as seen by tool-boundary policies.