list[str] settings fed from env were JSON-decoded by pydantic-settings before the field validator ran, so a plain string like CORS_ORIGINS=http://host:5009 raised JSONDecodeError on startup. Annotate list env fields with NoDecode and parse CSV/JSON in the validator. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>