AgentGuard workflows

Resumable workflows

When resume_if_exists and api_base_url are configured, the SDK asks that authenticated hosted workflow API for the active workflow by name and validates the returned receipt chain before allowing the next outcome. Local workflows are not discovered by name automatically.

Receipt-chain rule

Every receipt stores the previous receipt hash. Resume is refused if any signature, parent receipt, or chain hash fails validation.

Use workflows