diff --git a/crates/kebab-parse-image/src/lib.rs b/crates/kebab-parse-image/src/lib.rs
index dfcd171..b5d826b 100644
--- a/crates/kebab-parse-image/src/lib.rs
+++ b/crates/kebab-parse-image/src/lib.rs
@@ -8,7 +8,10 @@
 //! P6-2 adds the [`ocr`] module: an [`OcrEngine`] trait and an
 //! [`OllamaVisionOcr`] default adapter that talks to a vision-capable
 //! Ollama model. [`apply_ocr`] is the helper that mutates an
-//! [`ImageRefBlock`] in place.
+//! [`ImageRefBlock`] in place. Trust note — the LLM-driven default
+//! can hallucinate; `OcrText.engine` carries the source identity so
+//! consumers can branch trust by engine (Tesseract / Apple Vision
+//! adapters, when added, will write a different `engine` string).
 //!
 //! Per design §3.4 (Block::ImageRef + ImageRefBlock), §3.7a (OcrText /
 //! ModelCaption stubs), §9.1 (image extraction policy / OCR vs caption
diff --git a/crates/kebab-parse-image/src/ocr.rs b/crates/kebab-parse-image/src/ocr.rs
index 9a019c0..8d7f88a 100644
--- a/crates/kebab-parse-image/src/ocr.rs
+++ b/crates/kebab-parse-image/src/ocr.rs
@@ -116,6 +116,7 @@ pub fn apply_ocr(
 /// Ollama-vision OCR adapter — POSTs the image (base64) to
 /// `<endpoint>/api/generate` with a transcription prompt and reads the
 /// non-streaming response.
+#[derive(Debug)]
 pub struct OllamaVisionOcr {
     client: reqwest::blocking::Client,
     endpoint: String,
@@ -458,4 +459,44 @@ mod tests {
         let p = engine.build_prompt(Some(&Lang("und".into())));
         assert!(!p.contains("hint:"));
     }
+
+    /// `from_parts` (and by extension `new`) must reject an empty
+    /// endpoint string. Pinned so the bail message stays grep-able and
+    /// the constructor cannot drift to "silently accept a bad config".
+    #[test]
+    fn build_rejects_empty_endpoint() {
+        let r = OllamaVisionOcr::from_parts("", "m", vec![], 1024);
+        let err = r.expect_err("empty endpoint must bail").to_string();
+        assert!(
+            err.contains("endpoint is empty"),
+            "bail message missing 'endpoint is empty': {err}"
+        );
+    }
+
+    /// Whitespace-only model id trims to empty and must be rejected —
+    /// both `new` and `from_parts` route through the shared `build`,
+    /// so testing `from_parts` covers both.
+    #[test]
+    fn build_rejects_empty_model_after_trim() {
+        let r = OllamaVisionOcr::from_parts("http://x", "   ", vec![], 1024);
+        let err = r.expect_err("empty model must bail").to_string();
+        assert!(
+            err.contains("model is empty"),
+            "bail message missing 'model is empty': {err}"
+        );
+    }
+
+    /// Out-of-range `max_pixels` is silently clamped (not rejected) so
+    /// a bad config can't kill ingest. The accessor exposes the clamped
+    /// value so tests can verify the bound; the warning side-effect is
+    /// tested implicitly (no panic, no error).
+    #[test]
+    fn build_clamps_max_pixels_outside_legal_range() {
+        let too_small =
+            OllamaVisionOcr::from_parts("http://x", "m", vec![], 1).unwrap();
+        assert_eq!(too_small.max_pixels(), MIN_LONG_EDGE);
+        let too_big =
+            OllamaVisionOcr::from_parts("http://x", "m", vec![], u32::MAX).unwrap();
+        assert_eq!(too_big.max_pixels(), MAX_LONG_EDGE);
+    }
 }