third-party validation