Since the RBAC openapi specs are depended on by tenant clients, if there are errors or misconfigurations in the spec, it will prevent teams from generating new clients, which may ultimately block PR checks, etc.

The team should consider adding a pre-commit hook [1] and/or something that runs as part of the PR check pipeline to at least validate the spec and check for regressions or breaking changes.

[1] https://github.com/python-openapi/openapi-spec-validator