Python Defensive Programming and Input Validation

Defensive Programming and Input Validation is part of Software architecture and release engineering. This lesson focuses on the exact problem it solves, the behavior you can observe, and the limits to understand before applying it in your own project.

Validation belongs at trust boundaries. Explicit invariants protect downstream code and make failure modes testable.

What You Will Learn

• Identify the purpose of Defensive Programming and Input Validation and when it is useful.
• Understand the worked example and what happens to each input.
• Recognize the relevant compatibility, safety or correctness limitation.
• Apply the technique to a small exercise and verify the result.

Before You Start

You can run the Python-only portion in a local interpreter. Before adapting the example for real files, the operating system or production data, make a disposable test environment and record the Python version.

How It Works

Validation belongs at trust boundaries. Explicit invariants protect downstream code and make failure modes testable.

Focus on the public contract first: what goes in, what comes out, what may fail, and which state changes. Internal implementation details are useful only when they explain a measured behavior or guide a safe design decision.

Step-by-Step Example

The following self-contained example is intentionally small enough to read line by line. Comments containing another programming language or a terminal command are illustrative and must not be executed as Python source.

def discount_price(price, discount):
    if price < 0 or not 0 <= discount <= 1:
        raise ValueError('invalid price or discount')
    return round(price * (1 - discount), 2)
print(discount_price(100, 0.15))

Understanding the Example

1. A named function isolates one behavior so the example can call it again and check its output independently.
2. The print call exposes the result or a specific property of the operation. Compare it with your prediction rather than memorizing the line.
3. The important rule is: Validation belongs at trust boundaries. Explicit invariants protect downstream code and make failure modes testable.

Expected behavior: Validation belongs at trust boundaries. Explicit invariants protect downstream code and make failure modes testable. Exact timing values, platform paths, interpreter internals and native library availability may differ between machines.

Practical Use and Design Choices

Start with an observable requirement and a test. Separate the domain rule from input parsing, output formatting and infrastructure so failures can be reproduced with small examples.

Prefer the simplest design that meets the requirement. New layers, caching, concurrency or plugin systems should be motivated by actual use cases and measurable constraints.

A Second Scenario to Consider

Imagine using the same technique with an unavailable feature, an unexpected input or a larger workload. Before editing the code, identify which assumption of the first example no longer holds. Decide whether to reject the input, choose a safe fallback or change the design.

For this specific lesson: Test discount values just below zero and just above one.

Important Limitations

Never treat an assert statement as runtime validation for untrusted input.

Practice Exercise

1. Test discount values just below zero and just above one.
2. Write down the expected result before running a changed case.
3. Add a test for one normal case and one invalid or boundary case. Record the observed result and explain any difference.

Common Beginner Mistakes

• Never treat an assert statement as runtime validation for untrusted input.
• Never treat an assert statement as runtime validation for untrusted input.
• Applying Defensive Programming and Input Validation without checking input types, resource ownership, side effects or version support.

Key Takeaways

• Validation belongs at trust boundaries. Explicit invariants protect downstream code and make failure modes testable.
• The worked example demonstrates the central behavior of Defensive Programming and Input Validation using visible results and bounded input.
• A useful next step is: Test discount values just below zero and just above one.