JournalDAY 68 / LINKEDIN

FIELD NOTE / LINKEDIN

Use constrained decoding for the layer it controls.

The complete written thought and the evidence behind it. The video edition will follow its public release.

Journal September 25, 2026 · LinkedIn target December 4, 2026

Use constrained decoding for the layer it controls.

Video caption

Use constrained decoding for the layer it controls.

A valid route outlives the policy snapshot.

Decoder, validator, service and target readback.

My rule: Do not pay for a guarantee the layer cannot give.

#EricFieldNotes

Full written post / accessibility read

When a team says an agent is safe because outputs are constrained, I ask which layer made that promise. A decoder can guarantee supported form. The application still needs a source of truth, a current permission check and an observed result.

An agent selects a partner-transfer route under policy version one. Before dispatch, a signed amendment moves the customer to version two. Nothing about a strict schema, confident Choice or successful parse detects that time-of-check gap.

Document the model runtime's form contract, the authoritative record used for semantic validation, the principal and credential used at dispatch, and the target system readback. Test stale versions and an out-of-scope recipient on every reachable tool route.

Use a grammar when malformed output is expensive. Use held-out outcome tests for decisions, scoped credentials for effects, and readback for success. Do this because a green answer cannot prove a business action was correct just by being well formed.

#EricFieldNotes

Four-beat scene transcript

1. Use constrained decoding for the layer it controls.

When a team says an agent is safe because outputs are constrained, I ask which layer made that promise. A decoder can guarantee supported form. The application still needs a source of truth, a current permission check and an observed result.

Visual: A structured answer is one stage of a consequential action.

2. The failure can occur between layers.

An agent selects a partner-transfer route under policy version one. Before dispatch, a signed amendment moves the customer to version two. Nothing about a strict schema, confident Choice or successful parse detects that time-of-check gap.

Visual: A valid route outlives the policy snapshot.

3. Make each claim name its owner.

Document the model runtime's form contract, the authoritative record used for semantic validation, the principal and credential used at dispatch, and the target system readback. Test stale versions and an out-of-scope recipient on every reachable tool route.

Visual: Decoder, validator, service and target readback.

4. Purchase and build by control surface.

Use a grammar when malformed output is expensive. Use held-out outcome tests for decisions, scoped credentials for effects, and readback for success. Do this because a green answer cannot prove a business action was correct just by being well formed.

Visual: Do not pay for a guarantee the layer cannot give.

Research and claim limits

The examples identified as illustrative or simulated are design probes, not reported incidents. Vendor specifications do not establish workload performance.

More notes from the work ↗