Prior-process running tools

Trap: replaying a tool still projected as running looks like continuation because its call and input are durable, but the prior process may already have completed the side effect. Fix: before the next provider request, durably fail every abandoned local tool with exact error Tool execution interrupted; never silently re-execute it, because outcome and side-effect completion are unknown.