Use when validating request bodies in edge functions, RPC payloads, or any server endpoint — Zod (or similar) on the server, never trusting the client. Not for client-only forms (use typed-api-hooks-forms).