A timeout is three answers: designing tool calls that fail in a way an agent can act on

The worst tool return is not an error, it is the word "failed". A small contract (four outcomes, an intent-derived idempotency key, one deadline per task, a probe before any second attempt) is what lets an agent be wrong safely.