Forms: User behavior specification

Makes the server the authority for form validity while the client validates for speed, sharing error codes, focusing the first invalid field, and never leaking whether a private record exists.

Published Sep 12, 2026