Verified output
Can a model check its own work before it speaks?
Every structured part of an answer (amounts, totals, names, dates, commands) is checked against relations that must hold. If any fails, the output is withheld and the failure is named. The system repairs what it can and asks again when it can’t.