pub fn validate_workflow_patch(
bundle: &WorkflowBundle,
patch: &WorkflowPatch,
parent_ceiling: Option<&CapabilityPolicy>,
) -> WorkflowPatchValidationReportExpand description
Apply + validate + diff + ceiling check, in one pass. The bundle validator is the source of truth for “is this still a valid bundle?”; this function adds the patch-specific apply errors, the structural diff, and the capability delta on top.