Exercise 3: What validated() Returns — Possible Solution ==================================================================== WHAT $request->validated() ACTUALLY RETURNS ------------------------------ Per this chapter, calling ->validated() on the UpdatePageTitleRequest instance returns only the fields that were declared in rules() and that actually passed those rules - in this case, just the title field, already confirmed to be a required string of at most 200 characters. Any other data present in the raw request, or any field that failed validation, is excluded from the returned array. WHY IT'S SAFE TO PASS DIRECTLY INTO $page->update(...) ------------------------------ Per this chapter, because ->validated() has already filtered the data down to exactly the fields the rules() method explicitly declared as expected and valid, passing that array straight into $page->update() carries the same protection Chapter 2's own $fillable property already provides - only known, vetted fields can reach the database row, with no risk of an unexpected or malicious field slipping through via mass assignment. WHY THIS WORKS AS AN ANSWER ------------------------------ It correctly explains that validated() returns only the fields declared in rules() that passed validation, and correctly ties the safety of passing that array into update() back to the same mass-assignment protection concept already established for $fillable in Chapter 2.