How do you make an agent's write actions safe to retry?

Idempotency keys: the server stores the first result for a key and returns it to repeats, so a retried refund happens once.

The harness derives the key from task and step (or saves it in the checkpoint), so retries reuse it; a key the model invents each time protects nothing. Without API support, record completed writes and check before repeating.