fix: do validation first before actual business logic, like super()#3463