Escrowing every tool crossing for one period cuts leakage 1,704x, and 65 read-only tools still leak 2,400 bits per call.

Provisional Reachability holds each agent crossing in escrow for one period, audits held items with probability r, and revokes the window on any catch. An adversary crossing k times with c bits each expects kc(1-r)^k, giving a public-safe bound near c/(er) per window that simulation matches to 7.7 standard errors. The full stack drops a leak from 100,000 bits to 59 while leaving 12% of legitimate work standing, restored to 100% by keying windows per caller. The closing number is the honest one and the authors state it plainly: escrow over 65 read-only tools still leaves 2,400 bits per call. Read-only is not leak-free.