fix(rectification): surface dropped probes and filter tools by the decision

Silent unrenderable discriminators, a missing question-contract golden, and a always-on tool table were hiding fail-closed drops behind the prompt wall.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/lib/rectification-agentic/v9/engine-client.ts

@@ -22,6 +22,7 @@ import {
   parseWindowScan,
   type WindowScan,
 } from "./varga-observations";
+import { questionContractVersionIsCompatible } from "./probe-question-contract";
 
 export class RectificationEngineError extends Error {
   readonly code: string;
@@ -289,6 +290,7 @@ function readDecisionReceipt(value: unknown, candidates: readonly V9EngineCandid
     || (row.selection_allowed === true && row.display_allowed !== true)
     || (row.propose_allowed !== undefined && typeof row.propose_allowed !== "boolean")
     || (row.propose_allowed === true && row.selection_allowed !== true)
+    || !questionContractVersionIsCompatible(row.question_contract_version ?? row.question_contract)
   ) {
     return invalidReceipt();
   }