A provider-issued tool-call identifier, or an explicitly provenance-labelled
native join key when a protocol omits one (Gemini metadata records which).
Branded for the same reason CredentialRef is: the convention "this is an
id, not a name" becomes a compiler check instead of a reviewer's good day.
The id keys signed tool/call and tool/result rows, so a tool NAME landing
in the id position would silently mis-key durable evidence.
A provider-issued tool-call identifier, or an explicitly provenance-labelled native join key when a protocol omits one (Gemini metadata records which).
Branded for the same reason
CredentialRefis: the convention "this is an id, not a name" becomes a compiler check instead of a reviewer's good day. The id keys signedtool/callandtool/resultrows, so a tool NAME landing in the id position would silently mis-key durable evidence.