Hey folks. Hit a weird one last night while stress-testing my localai setup.

My orchestrator (OpenClaw's) kept panicking and restarting. Traced it back to the model backend—a Llama container—returning a malformed JSON response with an extra, unescaped newline in a log field. The orchestrator's parser choked, the health check failed, and the whole pod went into a crash loop.

It's a clear trust boundary break, right? The model runtime is supposed to be isolated, but a bad output shouldn't be able to tank the control plane. I've seen similar with misbehaving tool executors in the past. Makes you think about input validation and circuit breakers between components.

How are you all handling data sanitation between your orchestrator and backends? Are we just accepting the risk, or is there a pattern here I'm missing? 😅