Workflows
Remediation playbooks. Workflows graduate draft → approved → auto as their eval scores accrue; auto-execution can be killed per-workflow at any time. Every trigger evaluates the governance policies before any executor mutation.
No workflows yet
Remediation playbooks live here. Promotion to auto requires governance sign-off + a run of successful dry-runs — start with a draft.