A pipeline must reject an update if a critical uniqueness invariant fails. Which quality behavior is appropriate?

1. Change the invariant silently to always return true
2. Randomly sample invalid rows and accept the rest
3. Only record a warning and continue automatically
4. Fail the update on an expectation violation