#auditing

Move Workflows Behind One Coherent Capability Surface

Workflows become easier to trust when reads, previews, writes, idempotency, audit, permissions, and deployment boundaries share one explicit capability contract.