Schema-valid agent output still needs an authority check

Structured output from a model usually gets checked once: does it parse, and does it match the schema. If both pass, the object goes downstream as if it were trusted data. That check is necessary and