fix: validate() is supposed to return an array