basic implementation of validation levels

Closes #6213
Why is the validation param a string here?