Idempotency Keys Don't Stop AI Agents From Doing Things Twice

Here's a refund tool that most teams would call safe: def issue_refund(order_id: str, amount_cents: int, note: str): key = sha256(f"{order_id}|{amount_cents}|{note}".encode()).hexdigest() retu