Validate HTTP requests and responses against OpenAPI at runtime: middleware, proxies, and fail-open vs fail-closed

If your OpenAPI document is only consumed by a documentation renderer, it is a brochure. The same schema that tells a developer that email must be an email and amount_minor must be an integer can be e