Validates untrusted data before returning an owner-thread operation that invokes the handler. A decoder failure never invokes the handler.