pub fn validate(snapshot: &Value) -> Result<(), String>
Validate a bounded projection before process-only retention or public-cache publication.