Drop the bare "tool.content" pattern (any 400 mentioning tool.content in a non-list context would be sent through the image-strip path) and the profile flag snapshot test; the behaviour tests (classifier verdict + proactive downgrade) already pin the contract.