How should Structured outputs and tool calling be designed for production?

Use explicit schemas, server-side validation, allowlisted tools, parameter validation, authorization outside the model, idempotency, and clear error handling for failed tool calls.