[HELIX-344] Add app-specific ideal state validation, rb=16199