The problem
Agent workflows can hide where work goes and which checks it passed.
What it does
Lays out agent steps and policy checks spatially, with inspectable routing.
Scope & limits
Does not allocate hardware, and its syntax does not isolate hostile code. Hosts remain responsible for enforcement.