A workflow can be correct at every step and still have lost every route to an acceptable finished design.
Every task is valid and every connection permitted, and the design has still painted itself into a corner. Whether an addition is safe turns out to depend on the obligations the workflow already carries and the options it has left, which is not a property of the addition.