outputs is Record<string, unknown> because the workflow defines its own
shape. Validate it at the application boundary before mapping it into business
state.
When a workflow writes files, the engine owns their placement and authority.
Remote retrieval requires a separate application-controlled store until a
future published OpenAPI contract adds artifact routes.
Jobs
Keep outputs attached to the run identity.
Receipts
Store proof beside the terminal result.