Base class for expected failures while executing a Tool. Its message may be returned to the model, so it must be safe to disclose.