// pkg/api/validator/v1/job_plan_internal.go:86-92
if override := os.Getenv("AICR_VALIDATOR_IMAGE_REGISTRY"); override != "" {
    env = append(env, corev1.EnvVar{
        Name:  "AICR_VALIDATOR_IMAGE_REGISTRY",
        Value: override,
    })
}
if tag := os.Getenv("AICR_VALIDATOR_IMAGE_TAG"); tag != "" {
    env = append(env, corev1.EnvVar{
        Name:  "AICR_VALIDATOR_IMAGE_TAG",
        Value: tag,
    })
}

// BuildJobPlan creates a JobPlan from a validator entry.
//
// Environment Variables:
// This function reads from the calling process environment:
//   - AICR_VALIDATOR_IMAGE_REGISTRY: Overrides image registry for all validators
//   - AICR_VALIDATOR_IMAGE_TAG: Overrides image tag for all validators
// These values are forwarded to validator containers. External controllers should
// be aware that their process environment will affect the generated JobPlan.
func BuildJobPlan(...) JobPlan {

func BuildJobPlan(
    entry ValidatorEntry,
    runID string,
    namespace string,
    version string,
    commit string,
    serviceAccount string,
    imagePullSecrets []string,
    tolerations []corev1.Toleration,
    nodeSelector map[string]string,
    imageRegistryOverride string,  // New parameter
    imageTagOverride string,        // New parameter
) JobPlan {
    // Use parameters instead of os.Getenv()
    if imageRegistryOverride != "" {
        env = append(env, corev1.EnvVar{
            Name:  "AICR_VALIDATOR_IMAGE_REGISTRY",
            Value: imageRegistryOverride,
        })
    }
    // ...
}