Does Catalyst provide better exactly-once guarantees for agent tool calls than Temporal's activity model?

Neither provides automatic exactly-once for external tool calls. Temporal's activity model uses replay to ensure workflow consistency but not side-effect idempotency. Catalyst adds workload identity and verifiable execution, enabling you to implement idempotency keys across agent frameworks. For tool calls via MCP, Catalyst's authorization policies help prevent duplicate unauthorized calls, but the application must handle deduplication.