The Intermetrics VSR is not a good example on which to build policy.
That was an ACVC 2.0 validation (the first, in fact), and the validation policy
for ACVC 2.0 was pretty lax. It is stronger for ACVC 2.0.1 and is meant to be
much stronger for ACVC 2.1 (next spring).