Preflight replaces all that with a single static binary. It handles commands (with version constraints), env vars, files, TCP/HTTP endpoints, checksums, git state, and system resources. Works in FROM scratch images since it has zero dependencies.

Happy to hear what validation patterns I'm missing.