Start a durable transactional workflow.

Immediately execute an action after current governance, schema, and action-policy checks.

Persist a version-pinned workflow node; governance may add an approval gate or reject the plan.

Re-evaluate current governance and execute ready DAG nodes in bounded dependency waves.

Approve or reject a workflow node; approvals are subject to tenant governance while rejection remains fail-safe.

Return a failed/rejected/blocked workflow node to scheduling after current governance checks.

Persist a named workflow checkpoint and operator/agent-provided checkpoint data.

Commit a completed saga after current tenant governance checks.

Compensate saga steps in reverse order; rollback remains available as the safety path.

Immediately start compensation after a client-detected failure.

Inspect saga, workflow DAG, checkpoints, action versions, results, approvals, and recovery state.

Inspect a payload-safe timeline combining steps, workflow nodes, audit evidence, and integrity status.

Read append-only audit events without exposing action inputs, results, or secret material.

Verify the per-saga SHA-256 audit hash chain.

Inspect the effective governance backend, revision, budgets, approval threshold, and rule ids for the caller tenant.

Read durable governance decisions and safety overrides for one tenant-owned saga.

List active action contracts, schemas, semantic effects, risk, hashes, and execution policies.

Inspect one registered action contract by id and optional version.