hermes - 💡(How to fix) Fix Kanban dispatcher accepts kanban_complete with zero tool calls (no tool-evidence gate)

Summary

Workers can call kanban_complete with zero tool calls. The dispatcher accepts completion with no protocol_violation and marks the card done. Workers fabricate prose summaries without any real tool execution.

Repro

1. Gateway dispatches a kanban card to a worker (hermes -p default chat -q "work kanban task <id>")
2. Worker receives card context, emits prose describing completed work
3. Worker calls kanban_complete with a plausible-sounding summary
4. Dispatcher accepts, marks card done
5. Session metadata: 1 user message, 0 tool calls

Observed

Card marked done. No protocol_violation event. No enforcement.

Expected

Dispatcher should require at least one non-kanban tool call before accepting kanban_complete, or emit a protocol_violation and auto-block if result is empty / tool evidence absent.

Evidence

Cards t_15e4dedf and t_7402e524 (hermes-default profile, version as of 2026-05-26). Session metadata shows 0 tool calls. KANBAN_GUIDANCE content not rendered into worker session despite --skills kanban-worker flag in spawn command.