diff --git a/hbvm/src/vm/mod.rs b/hbvm/src/vm/mod.rs
index c6e8c93..0275558 100644
--- a/hbvm/src/vm/mod.rs
+++ b/hbvm/src/vm/mod.rs
@@ -1,3 +1,5 @@
+use crate::validate;
+
 mod value;
 
 use {
@@ -43,6 +45,11 @@ impl<'a> Vm<'a> {
         }
     }
 
+    pub fn new_validated(program: &'a [u8]) -> Result<Self, validate::Error> {
+        validate::validate(program)?;
+        Ok(unsafe { Self::new_unchecked(program) })
+    }
+
     pub fn run(&mut self) {
         use crate::bytecode::opcode::*;
         loop {
diff --git a/hbvm/src/vm/value.rs b/hbvm/src/vm/value.rs
index 3544dd4..3b95c0f 100644
--- a/hbvm/src/vm/value.rs
+++ b/hbvm/src/vm/value.rs
@@ -1,7 +1,4 @@
-use core::{
-    fmt::Debug,
-    ops::{Index, IndexMut},
-};
+use core::fmt::Debug;
 
 /// # Safety
 /// The macro invoker shall make sure that byte reinterpret-cast