Module protocol 

Runtime validation for an application’s published protocol surface.

Static checks can prove that an app opts into the model. This validator proves facts about the surface it actually built: unique stable addresses, registered document decoders, safe destructive declarations, usable unavailable reasons, and coherent execution/result contracts.

Structs

ContractViolation

Functions

validate_surface

validate_surface_contracts

Validate every transport-independent invariant. Hosts call this before publication even when their dynamic widget dispatch cannot enumerate its effect/view handler table. Tooling that owns an explicit handler table should use validate_surface for the additional coverage.