Exclusive: Bringing attestation, provenance, and tamper-evident execution history to workflows and AI agents