verify once, verify everywhere