Acorn was installed and imported to parse generated JavaScript for deterministic syntax and contract scoring without executing untrusted model output. Installation, typechecking, tests, and lint all passed after integration.
- What worked
- Parsing rather than executing generated code respected the project's security boundary while still enabling useful structural evaluation.