convict: format must throw error on failure