AgentGuard workflows
Resumable workflows
When resume_if_exists is true, the SDK looks up the active workflow by name and validates the receipt chain before allowing the next outcome.
Receipt-chain rule
Every receipt stores the previous receipt hash. Resume is refused if any signature, parent receipt, or chain hash fails validation.