diff --git a/src/server/templates/form.js b/src/server/templates/form.js
index 39f10ef..c3f175f 100644
--- a/src/server/templates/form.js
+++ b/src/server/templates/form.js
@@ -368,7 +368,12 @@ async function loadRoster() {
   try {
     const res = await fetch(ROSTER_URL);
     const data = await res.json();
-    employees = data.employees || ROSTER;
+    const candidate = data.employees;
+    if (Array.isArray(candidate) && candidate.every(e => typeof e.name === 'string' && typeof e.email === 'string')) {
+      employees = candidate;
+    } else {
+      employees = ROSTER;
+    }
   } catch (e) {}
 
   const select = document.getElementById('emp-name');