diff --git a/security/validation-chat.conf b/security/validation-chat.conf
new file mode 100644
index 0000000..f6ce776
--- /dev/null
+++ b/security/validation-chat.conf
@@ -0,0 +1,61 @@
+rule
+{
+  id "ALL1"
+  for data
+  filter
+  {
+    type name
+    regex ^<>*<%F0.>(<>*)$
+  }
+  checker
+  {
+    type customized
+    sig-type rsa-sha256
+    key-locator
+    {
+      type name
+      hyper-relation
+      {
+        k-regex ^([^<KEY>]*)<KEY><>*$
+        k-expand \\1
+        h-relation is-strict-prefix-of
+        p-regex ^<>*<%F0.>(<>*)$
+        p-expand \\1
+      }
+    }
+  }
+}
+
+rule
+{
+  id "ALL2"
+  for data
+  filter
+  {
+    type name
+    regex (<>*)$
+  }
+  checker
+  {
+    type customized
+    sig-type rsa-sha256
+    key-locator
+    {
+      type name
+      hyper-relation
+      {
+        k-regex ^([^<KEY>]*)<KEY><>$
+        k-expand \\1
+        h-relation is-strict-prefix-of
+        p-regex (<>*)$
+        p-expand \\1
+      }
+    }
+  }
+}
+
+trust-anchor
+{
+  type dir
+  dir "."
+}
diff --git a/security/validation-contact-manager.conf b/security/validation-contact-manager.conf
new file mode 100644
index 0000000..cb14f1a
--- /dev/null
+++ b/security/validation-contact-manager.conf
@@ -0,0 +1,117 @@
+rule
+{
+  id "ENDORSED"
+  for data
+  filter
+  {
+    type name
+    regex ^([^<DNS>]*)<DNS><ENDORSED>
+  }
+  checker
+  {
+    type customized
+    sig-type rsa-sha256
+    key-locator
+    {
+      type name
+      hyper-relation
+      {
+        k-regex ^([^<KEY>]*)<KEY><>*$
+        k-expand \\1
+        h-relation equal
+        p-regex ^([^<DNS>]*)<DNS><ENDORSED>
+        p-expand \\1
+      }
+    }
+  }
+}
+
+rule
+{
+  id "ENDORSEE"
+  for data
+  filter
+  {
+    type name
+    regex ^([^<DNS>]*)<DNS><><ENDORSEE>
+  }
+  checker
+  {
+    type customized
+    sig-type rsa-sha256
+    key-locator
+    {
+      type name
+      hyper-relation
+      {
+        k-regex ^([^<KEY>]*)<KEY><>*$
+        k-expand \\1
+        h-relation equal
+        p-regex ^([^<DNS>]*)<DNS><><ENDORSEE>
+        p-expand \\1
+      }
+    }
+  }
+}
+
+rule
+{
+  id "PROFILE"
+  for data
+  filter
+  {
+    type name
+    regex ^([^<DNS>]*)<DNS><PROFILE>
+  }
+  checker
+  {
+    type customized
+    sig-type rsa-sha256
+    key-locator
+    {
+      type name
+      hyper-relation
+      {
+        k-regex ^([^<KEY>]*)<KEY><>*$
+        k-expand \\1
+        h-relation equal
+        p-regex ^([^<DNS>]*)<DNS><PROFILE>
+        p-expand \\1
+      }
+    }
+  }
+}
+
+rule
+{
+  id "ALL"
+  for data
+  filter
+  {
+    type name
+    regex ^(<>*)$
+  }
+  checker
+  {
+    type customized
+    sig-type rsa-sha256
+    key-locator
+    {
+      type name
+      hyper-relation
+      {
+        k-regex ^([^<KEY>]*)<KEY><>*$
+        k-expand \\1
+        h-relation is-strict-prefix-of
+        p-regex ^(<>*)$
+        p-expand \\1
+      }
+    }
+  }
+}
+
+trust-anchor
+{
+  type dir
+  dir "."
+}