Start here. This is the direct spoken answer to practice first.
Overview
The model is one dependency inside a production feature, not the complete application boundary.
I separate the user-facing API, product and authorization rules, context assembly, model access, tools or data sources, output validation, and durable state. The application owns identity, permissions, business decisions, and side effects; the model proposes language or structured intent within those limits. This makes failures attributable and keeps provider behavior from becoming the system's authority.