we can error out and not reconcile in this case that a CR is invalid . It would make sense to reflect this status in a condition. #330 introduced conditions in the status, which gate Ready.

Valid = True, can be gated on successful validation, with exact messages that capture what is invalid when it is false.