validate string is an email address, if not return false basically validation can match 99% cases
(email string)
source not stored for this graph (policy: none)
no outgoing calls