an additional complication with the extraction I did of validation is that the extra dependencies callback takes the workdir as an argument after it may have been modified by another callback