Reject bad optional metadata without dropping the core event
When a provider adds optional timing or diagnostic fields to an otherwise valid event, validate those fields separately from the event's required protocol contract. If the optional values are missing, malformed, reversed, or overflow during unit conversion, discard only the deriv…