> it has never changed the toolset because doing so would break the prompt cache, and so would be expensive for users.

It could still make the tools into no-ops or disabled if it actually tries to use them, without changing the context history at all.