hzhang
833912fe27
The per-turn render path fires AgentClient resolution once per agent
per dynamic-block render — info-level logging on every call ("kb
AgentClient resolved token_present=true") drowns out actual signal.
Keep only the warn-level branch that fires when the lookup itself
errors (RPC failure, decrypt failure); silent success is the common
case and matches every other tool dispatch.