where would you put your validation rules?

for example a regex validating email format