Validate the incoming event before business logic runs, and the outgoing response after it returns (unless a shaped HTTP envelope or a raw string).
Validate the incoming event before business logic runs, and the outgoing response after it returns (unless a shaped HTTP envelope or a raw string).