pub fn validate_wasm_module(bytes: &[u8]) -> Result<(), PulseError>Expand description
Client-side pre-upload validation of a WASM module’s raw bytes — inspects the
binary (does NOT execute it) and mirrors the server’s
ChicoryWasmRunner.validateModule.
A conforming sandbox module must: have the WASM magic + version 1 header,
import zero host functions, and export alloc, process, and memory.
Anything else is rejected with PulseError::Validation so the failure is
surfaced locally instead of as a server 400 / runtime trap.