An object that cannot be wrong

• A

  A small type that validates on construction, so anything of that type is already valid

• B

  A shared validation function that every caller uses

• C

  Validation at the system boundary only, trusting every piece of internal code thereafter

• D

  A runtime assertion in each function, so failures are loud