When exposing a facade/wrapper/adapter API (my-endpoint) to an underlying system (SYS), should you perform input validation at the my-endpoint level or just let SYS fail and com