diff --git a/cmd/workflow/delete/delete.go b/cmd/workflow/delete/delete.go
index 928a1546..60db53c3 100644
--- a/cmd/workflow/delete/delete.go
+++ b/cmd/workflow/delete/delete.go
@@ -129,6 +129,10 @@ func (h *handler) ValidateInputs() error {
 }
 
 func (h *handler) Execute() error {
+	if !h.validated {
+		return fmt.Errorf("handler inputs not validated")
+	}
+
 	adapter, err := newRegistryDeleteStrategy(h.runtimeContext.ResolvedRegistry, h)
 	if err != nil {
 		return err
diff --git a/cmd/workflow/deploy/deploy.go b/cmd/workflow/deploy/deploy.go
index ba6c37c6..b525748b 100644
--- a/cmd/workflow/deploy/deploy.go
+++ b/cmd/workflow/deploy/deploy.go
@@ -205,6 +205,10 @@ func (h *handler) ValidateInputs() error {
 }
 
 func (h *handler) Execute(ctx context.Context) error {
+	if !h.validated {
+		return fmt.Errorf("handler inputs not validated")
+	}
+
 	deployAccess, err := h.credentials.GetDeploymentAccessStatus()
 	if err != nil {
 		return fmt.Errorf("failed to check deployment access: %w", err)