validate

Overview ¶

Package validate implements allowlist-only payload validation: recursively canonicalize known encodings, then check the decoded value against a strict per-field schema. No denylist keyword matching anywhere in this file - that approach loses to encoding tricks by construction, per the plan's Intent Integrity Plane.