Sort:  

they're validating "the order", not the actual payload