Type Your File Validation Library as a Security Boundary

Discriminated unions, branded types, and exhaustiveness checks turn validation from runtime hope into compile-time guarantee.