Add generic raw output validators

internal/framework/contracts/contracts.go

@@ -248,9 +248,10 @@ type Validator interface {
 }
 
 type ResponseSchema struct {
-	ID      string `json:"id,omitempty"`
-	Name    string `json:"name,omitempty"`
-	Version string `json:"version,omitempty"`
+	ID         string `json:"id,omitempty"`
+	Name       string `json:"name,omitempty"`
+	Version    string `json:"version,omitempty"`
+	JSONSchema []byte `json:"-"`
 }
 
 type ExtractOutput struct {

internal/framework/contracts/contracts_test.go

@@ -322,6 +322,32 @@ func TestLLMInputSetCloneCopiesContent(t *testing.T) {
 	}
 }
 
+func TestResponseSchemaJSONOmitRawSchemaContent(t *testing.T) {
+	schema := ResponseSchema{
+		ID:         "schema-id",
+		Name:       "schema-name",
+		Version:    "v1",
+		JSONSchema: []byte(`{"type":"object"}`),
+	}
+	encoded, err := json.Marshal(schema)
+	if err != nil {
+		t.Fatalf("json.Marshal() error = %v, want nil", err)
+	}
+	var got map[string]any
+	if err := json.Unmarshal(encoded, &got); err != nil {
+		t.Fatalf("json.Unmarshal() error = %v, want nil", err)
+	}
+	if got["id"] != "schema-id" || got["name"] != "schema-name" || got["version"] != "v1" {
+		t.Fatalf("encoded schema = %#v, want schema provenance", got)
+	}
+	if _, ok := got["json_schema"]; ok {
+		t.Fatalf("encoded schema leaked raw schema content: %s", encoded)
+	}
+	if _, ok := got["JSONSchema"]; ok {
+		t.Fatalf("encoded schema leaked raw schema content: %s", encoded)
+	}
+}
+
 func TestFakeMergeNormalizeAndOutputContracts(t *testing.T) {
 	extractOutput := ExtractOutput{
 		LaneID:       "generic-lane",

internal/framework/pipeline/runner.go

@@ -551,7 +551,7 @@ func (target rawValidationTarget) validationRequest(binding ModuleBinding) contr
 		LLMProfile:     binding.LLMProfile,
 		Options:        cloneOptions(binding.Options),
 		Metadata:       cloneMetadata(target.metadata),
-		Schema:         target.schema,
+		Schema:         cloneResponseSchema(target.schema),
 		Payload:        cloneRawPayload(target.payload),
 		ChunkID:        target.chunkID,
 		ChunkIndex:     target.chunkIndex,
@@ -1012,6 +1012,11 @@ func cloneRawPayload(payload contracts.RawPayload) contracts.RawPayload {
 	}
 }
 
+func cloneResponseSchema(schema contracts.ResponseSchema) contracts.ResponseSchema {
+	schema.JSONSchema = append([]byte(nil), schema.JSONSchema...)
+	return schema
+}
+
 func cloneSourceChunkPtr(chunk *contracts.SourceChunk) *contracts.SourceChunk {
 	if chunk == nil {
 		return nil
@@ -1050,6 +1055,7 @@ func cloneSourceUnits(units []source.SourceUnit) []source.SourceUnit {
 }
 
 func cloneExtractOutput(output contracts.ExtractOutput) contracts.ExtractOutput {
+	output.Schema = cloneResponseSchema(output.Schema)
 	output.Payload = cloneRawPayload(output.Payload)
 	return output
 }
@@ -1066,11 +1072,13 @@ func cloneExtractOutputs(outputs []contracts.ExtractOutput) []contracts.ExtractO
 }
 
 func cloneMergeOutput(output contracts.MergeOutput) contracts.MergeOutput {
+	output.Schema = cloneResponseSchema(output.Schema)
 	output.Payload = cloneRawPayload(output.Payload)
 	return output
 }
 
 func cloneNormalizeOutput(output contracts.NormalizeOutput) contracts.NormalizeOutput {
+	output.Schema = cloneResponseSchema(output.Schema)
 	output.Payload = cloneRawPayload(output.Payload)
 	return output
 }