Type-driven design

Goal

Invalid data cannot be constructed past the crate boundary.

Inputs / outputs

• In: raw input (CLI, config, JSON, u16, &str)
• Out: a type whose constructor is the validation

Reads / writes

• Read: call sites of the untyped value
• Write: none unless a playbook opened the task

Approval

Public API type changes (semver).