Fair point to raise. In my setup the model only sees the ambiguous remainder, and what it sees depends on how critical the business data is. Its output goes to a person to approve instead of acting on its own, so the approver is the check and I don’t run a separate canary there. If a provider changes behavior, I update the prompt or interface on my side.