Function validate_pipeline 

pub fn validate_pipeline(
    contract: PrecisionContract,
    primitives: &[PrimitiveSoundness],
) -> Result<Soundness, SoundnessViolation>

Validate that a primitive pipeline can satisfy a consumer precision contract, returning the composed soundness marker on success.

This is intentionally conservative. A ZeroFalsePositive pipeline rejects MustUnder because under-approximation can hide required sanitizer evidence, and rejects unfiltered MayOver because that can leak false positives to the consumer. A RecallDriven pipeline rejects MustUnder because false negatives break recall.

Errors

Returns SoundnessViolation when any primitive is incompatible with the requested contract.