test(rest-api): explicitly assert violations