This is a prompting issue. You're still responsible for constraining the behaviour of the system. For the validation example asking for tests that show validation passing and failing would have surfaced the issue.