It's brittle, for sure. But ultimately I am the API connector so any output goes through me before being actioned on.

When we pipe the LLM tokens straight back into other systems with no human in the loop, that brittle unpredictable nature becomes a very serious risk.