Bad data never gets through. A request arrives with an invalid email, no name and an amount that is not a number, and it comes straight back: rejected, bad input, email looks invalid, name is missing, amount is not a number. Nothing written, nobody woken up, no half-finished order left sitting in a system.