Replay with egress blocked, or it is not a replay

A replay that re-executes real tool calls is a re-run wearing a trace's clothes. Here is a paste-and-run check that blocks egress during replay, plus the five fields your trace needs so the blocked run still reproduces the original failure.