Use "HttpXxx" prefix for HTTP-validation (e.g. @HttpRequired), and implement a validate() method for validation at application layer (with annotations such as @Regexp)