The Java EE spec says

The name of the descriptor is WEB-INF/validation.xml for web modules and META-INF/validation.xml for all other types of modules.

That's surprising and I don't see how WEB-INF would work with the RI. Let's clarify whether that's intended.

Mailing list discussion: http://lists.jboss.org/pipermail/beanvalidation-dev/2017-March/001245.html