A few options I can think of:
- Validate in before update/insert triggers
- Validate in application logic
- Add a foreign key reference with acceptable states
- Use an ENUM with all the possible combinations, and don't allow NULL
I would probably use the last approach, personally.
EDIT:
Just realized--the SET
data type accomplishes this perfectly.