Error handling, retries, and circuit breakers

Models do not handle tool failures gracefully by default. A 500 error from an API, a timeout, or a schema mismatch will typically produce a confused or hallucinated response unless you engineer the failure path explicitly. Production tool use requires retries, circuit breakers, and structured error feedback.