Require post on this field.  A sufficiently long workflow will overrun the maximum request length in most browsers, resulting in no validation taking place.  Might want to also consider RequirePOST on the metohd in CpsFlowDefinition.