This is the job of a constraint evaluated during workflow transition,
no need for an external validator here.