Independently validate the supplied bug or risk finding using the diff and necessary read-only repository context. Confirm it is real, significant, and introduced by this pull request. Return the validator JSON contract only.