Pi extension: silently verifies agent context awareness every turn using hidden canary tokens. KV-cache friendly.