That’s a very sane stance. Treating LLM output as untrusted input is probably the correct default when correctness matters.

The worst failures I’ve seen happen when teams half-trust the model — enough to automate, but still needing heavy guardrails. Putting the checks outside the model keeps the system understandable and deterministic.

Ignoring AI unless it can be safely boxed isn’t anti-AI — it’s good engineering.