Could leverage mock execution for that, maybe opt commands in through a validation property in the config? Like in the old validation days, but all local and based on KCL checks.