Tool-provider routes now answer operations AFT does not serve with an unknown_op error instead of an empty success reply, so callers can no longer misread silence as a valid response. Management ops sent on a tool route are refused the same way, while health.digest and bg_events keep their existing handlers.
Confidence Score: 5/5
The PR appears safe to merge; no actionable issues were found.
Summary
Tool routes now return unknown_op for explicit operations AFT does not serve.
Tool routes reject operations AFT does not serve with a named error.
