Added value: +{
+  "description": "Optional subset of persona tools. [] disables tools for supplied-evidence drafts; omission inherits.",
+  "items": {
+    "minLength": 1,
+    "type": "string"
+  },
+  "maxItems": 100,
+  "type": "array",
+  "uniqueItems": true
+}

Previous value: -"Optional ids of steps this one builds on. Legacy DAG workflows execute sequentially in topological dependency order; this does not parallelise execution. Do not combine depends_on with routed fields."New value: +"Optional ids of steps this one builds on. A step starts only once every id it names has finished. Steps ready together share one bounded parallel layer in authored order. A definition with no arrows still runs in list order. Do not combine depends_on with routed fields."

Previous value: -{
-  "additionalProperties": false,
-  "properties": {
-    "text": {
-      "type": "string"
-    }
-  },
-  "required": [
-    "text"
-  ],
-  "type": "object"
-}New value: +null

Added value: +[
+  {
+    "not": {
+      "required": [
+        "id",
+        "step_id"
+      ]
+    }
+  }
+]

Previous value: -"Optional ids of steps this one builds on. Builder metadata only: it is recorded and returned, and it does NOT reorder or parallelise execution. Steps always run in list order."New value: +"Optional ids of steps this one builds on. Legacy DAG workflows execute sequentially in topological dependency order; this does not parallelise execution. Do not combine depends_on with routed fields."

Added value: +{
+  "description": "Require approval from the authenticated human review UI. API-key and MCP callers cannot cross this gate.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Optional next step id for an explicitly routed workflow. Do not combine routed fields with depends_on.",
+  "maxLength": 100,
+  "minLength": 1,
+  "pattern": "^(?:__end__|[A-Za-z0-9][A-Za-z0-9_.:-]*)$",
+  "type": "string"
+}

Added value: +{
+  "additionalProperties": false,
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "schema": {
+            "const": "scope_decision/v1"
+          }
+        },
+        "required": [
+          "schema"
+        ]
+      },
+      "then": {
+        "properties": {
+          "blocking_severities": {
+            "const": [
+              "P0",
+              "P1"
+            ]
+          },
+          "max_iterations": {
+            "const": 1
+          }
+        }
+      }
+    }
+  ],
+  "properties": {
+    "blocking_severities": {
+      "items": {
+        "enum": [
+          "P0",
+          "P1",
+          "P2",
+          "P3",
+          "P4",
+          "P5"
+        ],
+        "type": "string"
+      },
+      "maxItems": 6,
+      "minItems": 1,
+      "type": "array",
+      "uniqueItems": true
+    },
+    "loop_to": {
+      "maxLength": 100,
+      "minLength": 1,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]*$",
+      "type": "string"
+    },
+    "max_iterations": {
+      "maximum": 5,
+      "minimum": 1,
+      "type": "integer"
+    },
+    "pass_to": {
+      "maxLength": 100,
+      "minLength": 1,
+      "pattern": "^(?:__end__|[A-Za-z0-9][A-Za-z0-9_.:-]*)$",
+      "type": "string"
+    },
+    "schema": {
+      "enum": [
+        "severity_findings/v1",
+        "scope_decision/v1"
+      ],
+      "type": "string"
+    }
+  },
+  "required": [
+    "schema",
+    "loop_to",
+    "pass_to",
+    "max_iterations"
+  ],
+  "type": "object"
+}

Added value: +{
+  "description": "Require this step's actual provider to differ from the provider that produced the named earlier step.",
+  "maxLength": 100,
+  "minLength": 1,
+  "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]*$",
+  "type": "string"
+}

Added value: +{
+  "description": "Canonical stable identifier for routed steps. Do not supply both step_id and the legacy id field.",
+  "maxLength": 100,
+  "minLength": 1,
+  "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]*$",
+  "type": "string"
+}

Previous value: -"Optional kind of node. Defaults to 'agent' -- ask a model a question -- which is the only kind this build can execute. 'transform' and 'connector' are accepted and saved so a workflow authored for a later build round-trips, but a run that reaches one fails that single step with a plain message. Do NOT use them for work that must actually run."New value: +"Optional executable node kind. Defaults to 'agent', which asks a model a question. 'transform' runs a supported deterministic local operation; 'connector' invokes the configured connector runtime and fails that step if the runtime is unavailable."

Added value: +{
+  "description": "Optional. The definition fingerprint you last saw for this template, returned by update_workflow_template when it last succeeded. Supply it and the write refuses, changing nothing, if the stored template is no longer the one that fingerprint names -- someone else edited or deleted it since you read it. Omit it and the write proceeds as it always has, overwriting whatever is there. This is not the definition_sha reported for a run: that one also reflects global configuration, this one names the stored file alone.",
+  "maxLength": 64,
+  "minLength": 64,
+  "type": "string"
+}

Added value: +{
+  "description": "Optional configuration for a non-agent step. Must be omitted or empty for an 'agent' step, whose configuration is the named fields above (model, temperature, instruction, ...); params would be silently ignored there, so it is refused.",
+  "type": "object"
+}

Added value: +{
+  "description": "Optional kind of node. Defaults to 'agent' -- ask a model a question -- which is the only kind this build can execute. 'transform' and 'connector' are accepted and saved so a workflow authored for a later build round-trips, but a run that reaches one fails that single step with a plain message. Do NOT use them for work that must actually run.",
+  "enum": [
+    "agent",
+    "transform",
+    "connector"
+  ],
+  "type": "string"
+}