used when frozen is enabled so we can find the bundler spec, even if (say) a git gem is not checked out.
[Validate]