A portal changes its email format
They do it without notice, and a parser written against the old shape starts returning empty fields rather than failing loudly.
Every extracted field carries a confidence score. Anything below the threshold stops the workflow, files the raw email in a review queue, and alerts the office. Nothing goes out half-filled.

