The calls: inventory is a useful preflight check, but I'd also diff it between pinned mod versions in CI. An update that adds process, network or environment access should trigger review even when the visible feature hasn't changed. The inventory tells you which capability doors exist; a version-to-version diff makes newly added authority much harder to miss.