Structured Output Constrains the Shape, Not the Content
Constrained decoding guarantees a model's output has the right shape. It guarantees nothing about what a free-text field holds. Agent-to-agent pipelines that read schema-valid as validated inherit an injection surface the schema was never built to close.