Function violations_of

pub(crate) fn violations_of(
    payload: &[u8],
    schema: Option<&Schema>,
    mode: Mode,
) -> Vec<Violation>

Everything in payload that schema does not permit.

Parses on its own account rather than reusing the conversion’s parse. The two run on different paths — conversion only when the XML baseline is on, this whenever a schema is loaded and validation is not off — and one obvious check is worth more than one saved parse. A payload that will not parse at all is a conversion failure, reported where conversion happens, so nothing is said about it twice.