One API, Three Clients, and the Validation Rule That Only One of Them Obeyed

The validation logic had been solid for months. Pydantic schema on the request, a service-layer check for the actual business rule, tests green across the board. Then I added a CLI tool that talked to...