Frozen authority for the trusted outer workflow.
The workflow environment contains an optional compiled bundle, explicit host capabilities, and JSON-like data. The Kernel adds reserved runtime routes such as subordinate evaluation and workflow annotation during a run; callers cannot replace those names.
Construction validates the bundle attestation, duplicate or reserved capability names, JSON-like data, and every tool requirement recorded by the bundle. It never imports capabilities from a mission environment.
Summary
Types
@type t() :: %PtcRunner.Kernel.WorkflowEnvironment{ bundle: PtcRunner.Kernel.FrozenBundle.t() | nil, capabilities: %{required(binary()) => PtcRunner.Kernel.Capability.t()}, data: map() }