Error messages state the fix

An error states the actionable fix, not the rule that was broken — no blame, no 'oops'. Tell people what to do next.

'Choose a password with at least 8 characters', not 'That password is too short'.