Every error at once, not one per attempt.
This runs the same validator the submission endpoint runs, bundled from the same source file. It is not a lookalike check, so a manifest that passes here passes there for the same reasons. Everything happens in your browser; nothing is sent anywhere.