Two shots, if violation is in public API