Trust in agent-built software can’t come from the model, or from reading its output. A proposal for versioned Agent Contracts, standard receipts and one gate at merge, built on the supply-chain standards software already runs on. Draft for discussion.