Because a Reform form only reads the properties it declares, any extra keys in the incoming hash are ignored. This is true for both Reform 2 and 3, but Nick Sutterer highlights it as one of the selling points of Reform 3: strong_parameters and params.require/permit boilerplate can go away.