AgentGuard workflows

Migrating to v0.5.0

v0.5.0 is backward compatible with v0.4.x. Existing outcome calls continue to work. Workflows are opt-in.

What changes

Receipts can now include schema_version: 2, workflow_id, parent_receipt_id, chain_validation_hash, checkpoint fields, and reviewer cascade evidence. Standalone receipts use workflow_id: null.

Receipt-chain rule

Every receipt stores the previous receipt hash. Resume is refused if any signature, parent receipt, or chain hash fails validation.

Use workflows