Ok, I've added validation in the areas where custom code has been introduced (eg, the 'action' methods).  In addition, test coverage is back to 100% on the non-framework code.