# TC094 AI agent tool-call recovery worksheet

Freeze one business intent as one logical operation. Record every physical attempt, commit-boundary observation, reconciliation result, recovery owner and release veto.

## Required fields

1. Logical operation ID and normalized intent hash
2. Requester, identity, tenant and approval reference
3. Tool contract, provider version and target snapshot
4. Side effects, invariants and authoritative success check
5. Idempotency-key scope and retention
6. Attempt IDs, request hashes and provider request IDs
7. Commit-boundary observation and outcome state
8. Retry owner, count, elapsed-time and concurrency budgets
9. Reconciliation query and evidence
10. Partial results, compensation and dependency stops
11. Human owner, deadline and adjudication
12. Veto condition and release disposition

## Release rule

Do not deploy when a high-impact veto fails, an unknown write remains unresolved, or duplicate effects cannot be excluded. Keep the disposition `NOT_DEPLOYED` until a qualified owner approves a corrected rerun.