XSD subset content-model validation
Every document is checked against the XSD subset content model. A violation hard-fails with the offending XPath, the IG section it breached, and the corrected payload — never a generic parser exception. A structurally-invalid file never leaves the engine.
A content-model violation is a hard fail, not a warning.