Should we validate before we verify the software?