defense-in-depth

Use when invalid data causes failures deep in execution and validation is needed at multiple system layers — validate at every layer data passes through to make such bugs structurally impossible.