Figure 2: OpenAgentFlow normalizes instrumented actions into AgentEvents and checks them
with a shared PEP before execution; the control plane maintains policy, provenance, session, audit,
and update state.