build
Validates the current credential against the provider and returns the default model service. Provider failures retain the sanitized exception from the guarded transport as their cause. Credential-supplier failures are logged by exception type only because their messages and causes may contain secrets.
Return
observed decision service after credential validation
Throws
Invalid
if the credential cannot be validated