Complete single-source semantic validation

load.go

@@ -157,6 +157,13 @@ func Load[T any](source Source, supplied ...Options[T]) (*Result[T], error) {
 		resolutionSnapshots = resolved.snapshots
 		applyResolutionMetadata(&metadata, resolved)
 	}
+	if options.Definition.Validate != nil {
+		validationDiagnostics := runValidation(&configuration, options.Definition.Validate, schema, final, parsed.document)
+		accumulator.add(validationDiagnostics...)
+		if hasErrors(validationDiagnostics) {
+			return nil, accumulator.loadError()
+		}
+	}
 	return &Result[T]{
 		Config:      configuration,
 		metadata:    metadata,
@@ -177,9 +184,6 @@ func selectOptions[T any](source Source, supplied []Options[T]) (Options[T], []D
 	}
 	var diagnostics []Diagnostic
 	definition := options.Definition
-	if definition.Validate != nil {
-		diagnostics = append(diagnostics, optionDiagnostic(CodeOptionsUnavailable, "application validation is not available in this release boundary"))
-	}
 	if definition.Secret != nil {
 		diagnostics = append(diagnostics, optionDiagnostic(CodeOptionsUnavailable, "dynamic secret classification is not available in this release boundary"))
 	}
@@ -268,7 +272,7 @@ func checkVersion(rule *VersionRule, root *document.Node) []Diagnostic {
 	}
 	state := &validationState{
 		active: true, errorCode: CodeVersionError, warningCode: CodeVersionWarning,
-		document: root,
+		invalidPath: CodeVersionError, document: root,
 	}
 	validation := &Validation{state: state}
 	err := rule.Check(version, validation)