Bastion: A Schema-Aware Validator for Incomplete MCP Tool Responses

An agent calling a tool through the Model Context Protocol (MCP) (Anthropic, 2024) treats a 200-equivalent JSON-RPC result as ground truth. It has no innate sense of whether the payload it just receiv