Function validate_controller_enumeration 

pub fn validate_controller_enumeration(
    document: &PrincipalDocument,
    actor: &AgentId,
    now: i64,
    owner: &AgentId,
) -> Result<()>

Per-result check; caller authenticates the actor and resolves the document.