This resolves GR-70.

It also addresses the part of GR-52 regarding getting notified of your own system’s changes.

@knutsenm re-opening this PR against the `release` branch
Be explicit about when 'public' and error otherwise, in case validation changes.