An execution grant supplies an invocation ID for its report, distinguishing
separate permitted attempts. Outside that flow, use an explicit key when distinct
operations have identical step names and context. Deduplication of reports does
not make the external payment or tool call idempotent.