Validation: the Validate trait, the Valid<T> extractor (422 with
structured details on violation), and the OpenApi extension serving the
platform-generated document. derive(Validate) with rule attributes is a
contract-v1 candidate (the design schema has no field constraints yet).