sdcvalidator 4.3.0__tar.gz → 4.4.0__tar.gz

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sdcvalidator
-Version: 4.3.0
+Version: 4.4.0
 Summary: SDC4 structural validator with ExceptionalValue recovery — thin wrapper over xmlschema
 Author: Semantic Data Charter Foundation
 License-Expression: Apache-2.0
@@ -144,6 +144,24 @@ sdcvalidator-xml2json instance.xml -o output.json
 sdcvalidator-json2xml data.json schema.xsd -o output.xml
 ```
 
+## MCP Server
+
+`sdcvalidator` ships a stdio MCP (Model Context Protocol) server so any MCP-capable agent can validate SDC4 data without importing the Python library. It implements JSON-RPC 2.0 directly over stdio — no external MCP SDK dependency.
+
+```bash
+sdcvalidator-mcp serve --mcp
+```
+
+### Tools
+
+| Tool | Purpose |
+|------|---------|
+| `validate_instance` | Validate an XML instance against its SDC4 XSD schema. Returns pass/fail with error count and classified errors. |
+| `validate_and_report` | Validate an instance and return a detailed report with two-tier (structural vs semantic) error classification. |
+| `check_schema_compliance` | Check whether an XSD schema follows SDC4 principles (restriction only, no `xsd:extension`). Does not validate instances. |
+
+`validate_instance` and `validate_and_report` take `schema_path` and `instance_path`, plus an optional `check_compliance` boolean (default `true`). `check_schema_compliance` takes `schema_path` only.
+
 ## Two-Tier Error Classification
 
 | Tier | Type | Examples | Action |
@@ -157,6 +175,10 @@ SDC4 data models must use `xsd:restriction` only — never `xsd:extension`. This
 
 The validator checks this by default and rejects schemas that violate this principle.
 
+## Status
+
+Production-ready. Available on [PyPI](https://pypi.org/project/sdcvalidator/) under Apache 2.0.
+
 ## License
 
 Apache License 2.0 — see [LICENSE](LICENSE).

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/README.md

@@ -122,6 +122,24 @@ sdcvalidator-xml2json instance.xml -o output.json
 sdcvalidator-json2xml data.json schema.xsd -o output.xml
 ```
 
+## MCP Server
+
+`sdcvalidator` ships a stdio MCP (Model Context Protocol) server so any MCP-capable agent can validate SDC4 data without importing the Python library. It implements JSON-RPC 2.0 directly over stdio — no external MCP SDK dependency.
+
+```bash
+sdcvalidator-mcp serve --mcp
+```
+
+### Tools
+
+| Tool | Purpose |
+|------|---------|
+| `validate_instance` | Validate an XML instance against its SDC4 XSD schema. Returns pass/fail with error count and classified errors. |
+| `validate_and_report` | Validate an instance and return a detailed report with two-tier (structural vs semantic) error classification. |
+| `check_schema_compliance` | Check whether an XSD schema follows SDC4 principles (restriction only, no `xsd:extension`). Does not validate instances. |
+
+`validate_instance` and `validate_and_report` take `schema_path` and `instance_path`, plus an optional `check_compliance` boolean (default `true`). `check_schema_compliance` takes `schema_path` only.
+
 ## Two-Tier Error Classification
 
 | Tier | Type | Examples | Action |
@@ -135,6 +153,10 @@ SDC4 data models must use `xsd:restriction` only — never `xsd:extension`. This
 
 The validator checks this by default and rejects schemas that violate this principle.
 
+## Status
+
+Production-ready. Available on [PyPI](https://pypi.org/project/sdcvalidator/) under Apache 2.0.
+
 ## License
 
 Apache License 2.0 — see [LICENSE](LICENSE).

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sdcvalidator"
-version = "4.3.0"
+version = "4.4.0"
 description = "SDC4 structural validator with ExceptionalValue recovery — thin wrapper over xmlschema"
 license = "Apache-2.0"
 requires-python = ">=3.10"

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/src/sdcvalidator/__init__.py

@@ -14,7 +14,7 @@ Thin wrapper over xmlschema with two-tier error classification and the SDC4
 "quarantine-and-tag" recovery pattern (ISO 21090 ExceptionalValues).
 """
 
-__version__ = "4.3.0"
+__version__ = "4.4.0"
 
 # etree_tostring is re-exported from xmlschema so callers can serialize the
 # ElementTree returned by validate_with_recovery() without importing xmlschema

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/src/sdcvalidator/converters.py

@@ -18,6 +18,8 @@ from xml.etree import ElementTree as ET
 
 from xmlschema import XMLSchema11
 
+from .xsd11_restriction import build_xsd11_schema
+
 
 def xml_to_json(
     xml_path: Union[str, Path],
@@ -43,7 +45,7 @@ def xml_to_json(
     if schema_path is None:
         raise ValueError("schema_path is required for xml_to_json conversion")
 
-    schema = XMLSchema11(str(schema_path))
+    schema = build_xsd11_schema(str(schema_path))
     return schema.to_dict(str(xml_path))
 
 
@@ -73,7 +75,7 @@ def json_to_xml(
         elif isinstance(json_data, str):
             json_data = json.loads(json_data)
 
-    schema = XMLSchema11(str(schema_path))
+    schema = build_xsd11_schema(str(schema_path))
     element = schema.encode(json_data)
 
     output_path = Path(output_path)

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/src/sdcvalidator/validator.py

@@ -24,6 +24,8 @@ from xml.etree import ElementTree as ET
 from dataclasses import dataclass, field
 
 from xmlschema import XMLSchema11, XMLResource
+
+from .xsd11_restriction import build_xsd11_schema
 from xmlschema.validators.exceptions import XMLSchemaValidationError
 
 from .error_classifier import ErrorClassifier
@@ -100,7 +102,10 @@ class SDC4Validator:
                 raise SDC4SchemaValidationError(error_msg)
 
         if isinstance(schema, (str, Path)):
-            self.schema = XMLSchema11(str(schema), validation=validation)
+            # build_xsd11_schema preserves strict validation for every case except
+            # the valid XSD 1.1 substitution-group restriction that xmlschema
+            # false-rejects at build time (see xsd11_restriction).
+            self.schema = build_xsd11_schema(str(schema), validation=validation)
         else:
             self.schema = schema
 

sdcvalidator-4.4.0/src/sdcvalidator/xsd11_restriction.py

@@ -0,0 +1,167 @@
+#
+# Copyright 2025 Semantic Data Charter Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+"""
+XSD 1.1 substitution-group restriction support.
+
+SDC4 data models restrict a content model that references an abstract
+substitution-group head (``sdc4:Item``) down to the specific member elements a
+model defines. For example the reference-model cluster content ``label?, Item*``
+is restricted to ``label?, ms-A?, ms-B?, ...`` where each ``ms-*`` is a member
+of ``Item``'s substitution group.
+
+This is a valid restriction under **XSD 1.1 Part 1, Section 3.4.6.4 "Content type
+restricts (Complex Content)"**, which defines restriction in terms of the
+instances a content model accepts. XSD 1.1 removed the XSD 1.0 particle
+name-matching rule (``NameAndTypeOK``). A conformant XSD 1.1 processor accepts
+the construct, and the Apache Xerces-J XML Schema 1.1 reference build does accept
+it. See ``SDCRM/docs/VALIDATORS.md`` and
+https://www.w3.org/TR/xmlschema11-1/#derivation-ok-restriction .
+
+``xmlschema`` (through at least 4.x) still applies the removed XSD 1.0 rule and
+rejects this construct at schema-build time with "the derived group is an illegal
+restriction". This module recognises that specific false positive, structurally,
+so the schema can be built while genuinely invalid restrictions stay fatal.
+
+Recognition is not message-matching alone: for the reported complex type we
+confirm that every element in the derived content model either matches a base
+element by name (an ordinary restriction xmlschema already checks) or is a member
+of a substitution group whose head appears in the base content model, with
+compatible occurrences. A restriction to a non-member element, or one that widens
+occurrences, is not recognised and remains a fatal error.
+"""
+
+from typing import Union
+from pathlib import Path
+
+from xmlschema import XMLSchema11
+from xmlschema.validators.exceptions import XMLSchemaParseError
+
+# xmlschema phrasings for the complex-content restriction rejection.
+_RESTRICTION_MARKERS = ("illegal restriction", "not a valid restriction")
+
+
+def _occurs_within(member, head) -> bool:
+    """True if ``member``'s occurrence range is inside ``head``'s range, i.e. the
+    member is a valid occurrence-restriction of the head particle."""
+    if member.min_occurs < head.min_occurs:
+        return False
+    if head.max_occurs is None:  # head is unbounded, any bound is within it
+        return True
+    if member.max_occurs is None:
+        return False
+    return member.max_occurs <= head.max_occurs
+
+
+def is_substitution_group_restriction_false_positive(error) -> bool:
+    """Return True iff ``error`` is xmlschema wrongly rejecting a valid XSD 1.1
+    substitution-group-member restriction (Section 3.4.6.4).
+
+    Narrow by construction: returns False for genuinely invalid restrictions
+    (restricting to a non-member element, or widening an element's occurrences),
+    so it never masks a real schema defect.
+    """
+    if not isinstance(error, XMLSchemaParseError):
+        return False
+    message = (getattr(error, "message", "") or "").lower()
+    if not any(marker in message for marker in _RESTRICTION_MARKERS):
+        return False
+
+    complex_type = getattr(error, "validator", None)
+    base_type = getattr(complex_type, "base_type", None)
+    derived_group = getattr(complex_type, "content", None)
+    base_group = getattr(base_type, "content", None)
+    if complex_type is None or base_type is None:
+        return False
+    if derived_group is None or base_group is None:
+        return False
+
+    try:
+        # Only the element-only sequence-restricts-sequence case is in scope.
+        if getattr(derived_group, "model", None) != "sequence":
+            return False
+        if getattr(base_group, "model", None) != "sequence":
+            return False
+
+        substitution_groups = complex_type.maps.substitution_groups
+
+        base_named = {}   # name -> base element declaration
+        base_heads = []   # substitution-group head particles in the base
+        for particle in base_group.iter_model():
+            name = getattr(particle, "name", None)
+            if name is None:
+                return False  # a wildcard or nested group in the base — out of scope
+            base_named[name] = particle
+            # An element heads a substitution group when its name keys the map.
+            # The head need not be abstract (S3Model's 'Items' head is not).
+            if name in substitution_groups:
+                base_heads.append(particle)
+
+        for derived in derived_group.iter_model():
+            dname = getattr(derived, "name", None)
+            if dname is None:
+                return False  # wildcard/nested group in the restriction — out of scope
+
+            if dname in base_named:
+                # Ordinary same-name restriction; xmlschema's own element check
+                # decides whether it is valid (occurrence tightening, fixed value,
+                # validly-derived type). If it is not, this is a real error.
+                if not derived.is_restriction(base_named[dname]):
+                    return False
+                continue
+
+            # Not a same-name element: it must substitute for a base head element
+            # and its occurrences must fall inside that head's occurrences.
+            matched = False
+            for head in base_heads:
+                members = substitution_groups.get(head.name) or ()
+                if any(getattr(m, "name", None) == dname for m in members):
+                    matched = _occurs_within(derived, head)
+                    break
+            if not matched:
+                return False
+
+        return True
+    except Exception:
+        # Any unexpected shape: be conservative and treat as a real error.
+        return False
+
+
+def build_xsd11_schema(
+    source: Union[str, Path, "XMLSchema11"], validation: str = "strict"
+) -> XMLSchema11:
+    """Build an ``XMLSchema11`` while tolerating only the known-valid XSD 1.1
+    substitution-group restriction that xmlschema false-rejects.
+
+    Strict mode is preserved for every other case: a clean schema builds once in
+    strict mode; a schema that fails strict only because of the substitution-group
+    false positive is rebuilt in lax mode and returned; any genuine error keeps
+    the build fatal. ``lax`` and ``skip`` are passed through unchanged.
+
+    A lax-built schema still enforces the restriction during instance validation
+    (valid members are accepted, non-members rejected); only xmlschema's incorrect
+    build-time check is bypassed.
+    """
+    if validation != "strict":
+        return XMLSchema11(source, validation=validation)
+
+    try:
+        return XMLSchema11(source, validation="strict")
+    except XMLSchemaParseError as strict_error:
+        if not is_substitution_group_restriction_false_positive(strict_error):
+            raise
+        schema = XMLSchema11(source, validation="lax")
+        genuine = [
+            e for e in schema.all_errors
+            if not is_substitution_group_restriction_false_positive(e)
+        ]
+        if genuine:
+            # Real problems remain; surface the first one, not the false positive.
+            raise genuine[0]
+        return schema

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/src/sdcvalidator.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sdcvalidator
-Version: 4.3.0
+Version: 4.4.0
 Summary: SDC4 structural validator with ExceptionalValue recovery — thin wrapper over xmlschema
 Author: Semantic Data Charter Foundation
 License-Expression: Apache-2.0
@@ -144,6 +144,24 @@ sdcvalidator-xml2json instance.xml -o output.json
 sdcvalidator-json2xml data.json schema.xsd -o output.xml
 ```
 
+## MCP Server
+
+`sdcvalidator` ships a stdio MCP (Model Context Protocol) server so any MCP-capable agent can validate SDC4 data without importing the Python library. It implements JSON-RPC 2.0 directly over stdio — no external MCP SDK dependency.
+
+```bash
+sdcvalidator-mcp serve --mcp
+```
+
+### Tools
+
+| Tool | Purpose |
+|------|---------|
+| `validate_instance` | Validate an XML instance against its SDC4 XSD schema. Returns pass/fail with error count and classified errors. |
+| `validate_and_report` | Validate an instance and return a detailed report with two-tier (structural vs semantic) error classification. |
+| `check_schema_compliance` | Check whether an XSD schema follows SDC4 principles (restriction only, no `xsd:extension`). Does not validate instances. |
+
+`validate_instance` and `validate_and_report` take `schema_path` and `instance_path`, plus an optional `check_compliance` boolean (default `true`). `check_schema_compliance` takes `schema_path` only.
+
 ## Two-Tier Error Classification
 
 | Tier | Type | Examples | Action |
@@ -157,6 +175,10 @@ SDC4 data models must use `xsd:restriction` only — never `xsd:extension`. This
 
 The validator checks this by default and rejects schemas that violate this principle.
 
+## Status
+
+Production-ready. Available on [PyPI](https://pypi.org/project/sdcvalidator/) under Apache 2.0.
+
 ## License
 
 Apache License 2.0 — see [LICENSE](LICENSE).

{sdcvalidator-4.3.0 → sdcvalidator-4.4.0}/src/sdcvalidator.egg-info/SOURCES.txt

@@ -12,6 +12,7 @@ src/sdcvalidator/instance_modifier.py
 src/sdcvalidator/mcp_server.py
 src/sdcvalidator/schema_checker.py
 src/sdcvalidator/validator.py
+src/sdcvalidator/xsd11_restriction.py
 src/sdcvalidator.egg-info/PKG-INFO
 src/sdcvalidator.egg-info/SOURCES.txt
 src/sdcvalidator.egg-info/dependency_links.txt
@@ -25,4 +26,5 @@ tests/test_instance_modifier.py
 tests/test_mcp_server.py
 tests/test_recovery.py
 tests/test_schema_checker.py
-tests/test_validator.py
+tests/test_validator.py
+tests/test_xsd11_restriction.py

sdcvalidator-4.4.0/tests/test_xsd11_restriction.py

@@ -0,0 +1,204 @@
+#
+# Copyright 2025 Semantic Data Charter Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+"""
+Tests for XSD 1.1 substitution-group restriction support.
+
+The reference behaviour is the Apache Xerces-J XML Schema 1.1 build, which
+accepts a Data Model that restricts an abstract substitution-group head to
+specific member elements (valid per XSD 1.1 Part 1 Section 3.4.6.4) and rejects
+genuinely invalid restrictions. build_xsd11_schema must match that: accept the
+valid construct that stock xmlschema false-rejects, keep real errors fatal, and
+still enforce the restriction during instance validation.
+"""
+
+import pytest
+from xmlschema.validators.exceptions import XMLSchemaParseError
+
+from sdcvalidator.xsd11_restriction import (
+    build_xsd11_schema,
+    is_substitution_group_restriction_false_positive,
+)
+
+
+# A reference model with an ABSTRACT substitution-group head (like sdc4:Item),
+# concrete member types that reach the head's type through an extension (like
+# ClusterType/XdAdapterType extending ItemType), and a cluster whose content is
+# `label?, Item*`.
+ABSTRACT_HEAD_RM = """<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:vc="http://www.w3.org/2007/XMLSchema-versioning"
+            xmlns:t="urn:test" targetNamespace="urn:test"
+            elementFormDefault="qualified" vc:minVersion="1.1">
+  <xsd:complexType abstract="true" name="ItemType"><xsd:sequence/></xsd:complexType>
+  <xsd:element abstract="true" name="Item" type="t:ItemType"/>
+  <xsd:complexType name="MidType"><xsd:complexContent><xsd:extension base="t:ItemType">
+     <xsd:sequence><xsd:element name="v" type="xsd:string" minOccurs="0"/></xsd:sequence>
+  </xsd:extension></xsd:complexContent></xsd:complexType>
+  <xsd:complexType name="MemberType"><xsd:complexContent><xsd:restriction base="t:MidType">
+     <xsd:sequence><xsd:element name="v" type="xsd:string" minOccurs="0"/></xsd:sequence>
+  </xsd:restriction></xsd:complexContent></xsd:complexType>
+  <xsd:element name="ms-a" substitutionGroup="t:Item" type="t:MemberType"/>
+  <xsd:element name="ms-b" substitutionGroup="t:Item" type="t:MemberType"/>
+  <xsd:complexType name="ClusterType"><xsd:complexContent><xsd:extension base="t:ItemType">
+    <xsd:sequence>
+      <xsd:element name="label" type="xsd:string" minOccurs="0"/>
+      <xsd:element ref="t:Item" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence></xsd:extension></xsd:complexContent></xsd:complexType>
+  {derived}
+  <xsd:element name="root" type="t:DataCluster"/>
+</xsd:schema>
+"""
+
+# The valid restriction that stock xmlschema false-rejects: a fixed-value leading
+# label plus specific substitution-group members in place of the Item head.
+VALID_DERIVED = """
+  <xsd:complexType name="DataCluster"><xsd:complexContent><xsd:restriction base="t:ClusterType">
+    <xsd:sequence>
+      <xsd:element name="label" type="xsd:string" minOccurs="1" maxOccurs="1" fixed="Fixed Label"/>
+      <xsd:element ref="t:ms-a" minOccurs="0" maxOccurs="1"/>
+      <xsd:element ref="t:ms-b" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence></xsd:restriction></xsd:complexContent></xsd:complexType>
+"""
+
+# Genuinely invalid: restrict a required head slot to an element that is NOT a
+# member of the head's substitution group. xmlschema raises "illegal restriction"
+# here, and the recognizer must decline to suppress it (stranger is not a member),
+# so the error stays fatal.
+INVALID_NONMEMBER_SCHEMA = """<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:vc="http://www.w3.org/2007/XMLSchema-versioning"
+            xmlns:t="urn:test" targetNamespace="urn:test"
+            elementFormDefault="qualified" vc:minVersion="1.1">
+  <xsd:complexType abstract="true" name="ItemType"><xsd:sequence/></xsd:complexType>
+  <xsd:element abstract="true" name="Item" type="t:ItemType"/>
+  <xsd:complexType name="MemberType"><xsd:complexContent><xsd:restriction base="t:ItemType">
+     <xsd:sequence/></xsd:restriction></xsd:complexContent></xsd:complexType>
+  <xsd:element name="ms-a" substitutionGroup="t:Item" type="t:MemberType"/>
+  <!-- stranger is derived from ItemType but is NOT in Item's substitution group -->
+  <xsd:element name="stranger" type="t:MemberType"/>
+  <xsd:complexType name="BaseType"><xsd:sequence>
+    <xsd:element ref="t:Item" minOccurs="1" maxOccurs="1"/>
+  </xsd:sequence></xsd:complexType>
+  <xsd:complexType name="DataCluster"><xsd:complexContent><xsd:restriction base="t:BaseType">
+    <xsd:sequence>
+      <xsd:element ref="t:stranger" minOccurs="1" maxOccurs="1"/>
+    </xsd:sequence></xsd:restriction></xsd:complexContent></xsd:complexType>
+  <xsd:element name="root" type="t:DataCluster"/>
+</xsd:schema>
+"""
+
+# A reference model whose substitution-group head element is NOT abstract (like
+# S3Model's 'Items'); only its type is abstract.
+NONABSTRACT_HEAD_SCHEMA = """<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:vc="http://www.w3.org/2007/XMLSchema-versioning"
+            xmlns:t="urn:test" targetNamespace="urn:test"
+            elementFormDefault="qualified" vc:minVersion="1.1">
+  <xsd:complexType abstract="true" name="ItemsType"><xsd:sequence/></xsd:complexType>
+  <xsd:element name="Items" type="t:ItemsType"/>
+  <xsd:complexType name="MemberType"><xsd:complexContent><xsd:restriction base="t:ItemsType">
+     <xsd:sequence/></xsd:restriction></xsd:complexContent></xsd:complexType>
+  <xsd:element name="ms-a" substitutionGroup="t:Items" type="t:MemberType"/>
+  <xsd:element name="ms-b" substitutionGroup="t:Items" type="t:MemberType"/>
+  <xsd:complexType name="ClusterType"><xsd:sequence>
+    <xsd:element name="label" type="xsd:string" minOccurs="0"/>
+    <xsd:element ref="t:Items" minOccurs="0" maxOccurs="unbounded"/>
+  </xsd:sequence></xsd:complexType>
+  <xsd:complexType name="DataCluster"><xsd:complexContent><xsd:restriction base="t:ClusterType">
+    <xsd:sequence>
+      <xsd:element name="label" type="xsd:string" minOccurs="1" maxOccurs="1" fixed="X"/>
+      <xsd:element ref="t:ms-a" minOccurs="0" maxOccurs="1"/>
+      <xsd:element ref="t:ms-b" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence></xsd:restriction></xsd:complexContent></xsd:complexType>
+  <xsd:element name="root" type="t:DataCluster"/>
+</xsd:schema>
+"""
+
+
+def _write(tmp_path, name, content):
+    p = tmp_path / name
+    p.write_text(content)
+    return str(p)
+
+
+def test_valid_substitution_restriction_builds(tmp_path):
+    """The valid substitution-group restriction that stock xmlschema rejects
+    must build under strict validation."""
+    path = _write(tmp_path, "valid.xsd", ABSTRACT_HEAD_RM.format(derived=VALID_DERIVED))
+    schema = build_xsd11_schema(path)  # strict by default
+    assert "root" in schema.elements
+
+
+def test_nonabstract_head_builds(tmp_path):
+    """A substitution-group head that is not declared abstract (S3Model 'Items'
+    style) is still recognised."""
+    path = _write(tmp_path, "s3m.xsd", NONABSTRACT_HEAD_SCHEMA)
+    schema = build_xsd11_schema(path)
+    assert "root" in schema.elements
+
+
+def test_valid_restriction_enforced_on_instances(tmp_path):
+    """A lax-built schema must still enforce the restriction: valid members are
+    accepted, non-members rejected."""
+    path = _write(tmp_path, "valid.xsd", ABSTRACT_HEAD_RM.format(derived=VALID_DERIVED))
+    schema = build_xsd11_schema(path)
+    schema.validate('<root xmlns="urn:test"><label>Fixed Label</label><ms-a/></root>')
+    with pytest.raises(Exception):
+        schema.validate('<root xmlns="urn:test"><label>Fixed Label</label><intruder/></root>')
+
+
+def test_nonmember_restriction_stays_fatal(tmp_path):
+    """Restricting the head slot to a non-member element is a real error and must
+    remain fatal."""
+    path = _write(tmp_path, "nonmember.xsd", INVALID_NONMEMBER_SCHEMA)
+    with pytest.raises(XMLSchemaParseError):
+        build_xsd11_schema(path)
+
+
+def test_widened_cardinality_stays_fatal(tmp_path):
+    """Widening an element's occurrences is not a valid restriction and must
+    remain fatal."""
+    schema_xsd = """<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:vc="http://www.w3.org/2007/XMLSchema-versioning"
+            xmlns:t="urn:test" targetNamespace="urn:test" vc:minVersion="1.1">
+  <xsd:complexType name="BaseType"><xsd:sequence>
+    <xsd:element name="a" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+  </xsd:sequence></xsd:complexType>
+  <xsd:complexType name="DerivedType"><xsd:complexContent>
+    <xsd:restriction base="t:BaseType"><xsd:sequence>
+      <xsd:element name="a" type="xsd:string" minOccurs="0" maxOccurs="3"/>
+    </xsd:sequence></xsd:restriction></xsd:complexContent></xsd:complexType>
+  <xsd:element name="root" type="t:DerivedType"/>
+</xsd:schema>
+"""
+    path = _write(tmp_path, "widen.xsd", schema_xsd)
+    with pytest.raises(XMLSchemaParseError):
+        build_xsd11_schema(path)
+
+
+def test_clean_schema_unaffected(tmp_path):
+    """A schema with no restriction issues builds normally."""
+    schema_xsd = """<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:t="urn:test" targetNamespace="urn:test">
+  <xsd:element name="root" type="xsd:string"/>
+</xsd:schema>
+"""
+    path = _write(tmp_path, "clean.xsd", schema_xsd)
+    schema = build_xsd11_schema(path)
+    assert "root" in schema.elements
+
+
+def test_recognizer_ignores_non_restriction_errors():
+    """The recognizer must not treat an unrelated error as the false positive."""
+    class Other(Exception):
+        message = "something else entirely"
+    assert is_substitution_group_restriction_false_positive(Other()) is False