AgentGuard workflows
Workflow caps
Workflows wrap multiple outcome calls under one budget envelope, one duration cap, and one receipt chain. Use them for migrations, audits, multi-day agent runs, and recurring batch jobs.
Receipt-chain rule
Every receipt stores the previous receipt hash. Resume is refused if any signature, parent receipt, or chain hash fails validation.