tighter integrated validator and core service

- header validators can report errors directly to the service
- all service methods related to the response code are now public.