Valid JSON is not a valid business object.
You own the boundary between an LLM extractor and an order workflow.
An extraction endpoint parses successfully, but an empty items array violates a downstream invariant. Three blind retries increase latency without making the consumer safer.
Design a contract that rejects malformed and semantically invalid output before it crosses the application boundary.
Weak contracts turn probabilistic output into deterministic downstream failures.