I use Params::Validate to validate subroutine args and Data::FormValidator to validate input data. Despite the name the latter is usable outside the context of a web app.

-sam