Strict tool-output path
Why it matters
Schema validation attaches to a completed tool call, not to refusals, truncations, or plain text responses.
Example
Force extract_invoice, then read its validated input only when the response actually stopped on tool_use.