we run ~10k gvisor-sandboxed agents and found it easier to treat hallucinations as standard runtime errors. if the model calls a non-existent method, the script just crashes and we retry. curious if the ast analysis overhead is really worth it over just letting the runtime fail, especially if you have proper isolation.