catch-all validation