An extraction schema expects a date and numeric total, but the returned values are malformed. Which boundary should reject or route the result before persistence?

1. The source file's display name
2. A successful TLS handshake alone
3. Only the UI's text color
4. Application-side schema and business validation