When LLMs orchestrate tool calls, they routinely generate malformed invocations like search_web({}) that crash at runtime. There's no type safety, no convergence guarantee, and no provenance tracking.