Post

Make the mock return malformed tool output, trigger a retry, and leave state half-written. Those cases expose whether recovery is safe before deployment.