41 — Idempotent Tool Execution
Make repeated attempts at one business operation converge on one recorded effect, even when agents, queues, or networks deliver the request more than once.
Make failure a designed part of the system. Recover work safely and keep useful service available.
Make repeated attempts at one business operation converge on one recorded effect, even when agents, queues, or networks deliver the request more than once.
Stop sending ordinary traffic to an unhealthy dependency, probe recovery deliberately, and protect the rest of the agent workflow from repeated failure.
Repair specific validated defects in an agent’s work through bounded feedback, preserving accepted facts and preventing repeated unsafe actions.
Place accountable human decisions at explicit workflow boundaries, presenting sufficient evidence and preserving approval scope through execution.
Preserve the most valuable safe subset of service during dependency failure, making reduced capability and evidence freshness explicit to users.
Terminate agent loops predictably when iteration, time, cost, or progress limits are reached, returning an honest partial outcome and a controlled next step.
Use evaluated alternate prompt strategies for specific recoverable failure classes while preserving policy, evidence requirements, and response contracts.
Quarantine repeatedly failing agent jobs with enough context for diagnosis and controlled replay, keeping poison work from blocking healthy processing.
Allocate end-to-end deadlines across queueing, inference, tools, retries, and finalization so work stops predictably and uncertain side effects are reconciled.
Retry transient failures with bounded exponential delays and randomized timing, preserving operation identity and respecting the remaining task deadline.
Restore a coherent workflow checkpoint while explicitly compensating business effects that a database rollback cannot undo.
Continue eligible model work through independent providers without silently changing capability, privacy, or output contracts.
Separate process survival, traffic readiness, and end-to-end agent capability so health automation makes the correct recovery decision.
Bound retained state and resource lifetimes so long-running agents remain stable as conversations, tools, and tenants accumulate.
Connect agent decisions, retrieval, model calls, and tool effects into one causal execution record using interoperable trace context.
Distribute inference work using token demand, queue pressure, capability, and cache locality instead of treating all requests as equal.
Persist agent progress and effect receipts so a replacement worker can resume safely after an abrupt process or machine failure.
Represent completed, failed, and unknown sub-results explicitly so a workflow can deliver useful work without misrepresenting completion.
Contain overload and dependency failures so one slow tool or model does not consume the capacity of an entire agent platform.
Test explicit resilience hypotheses by injecting controlled infrastructure and AI-specific faults, then measuring whether workflow invariants survive.