If the workflow is active, do not show the submit button in the Ruleflow form. And show a message in the form. And no sneaky paths directly into the RuleflowSave, either.