Attack that exhausts agent resources or reasoning capacity by forcing expensive or wasteful tool invocations.