A Docker image reference is not a string, it is a grammar. Five references that pass in your editor and fail at the daemon — and what the Docker Image Tag Validator catches that your build cache hides.