Optional vignette: MCP does not bypass governance. It lists golden company templates and refuses blocked nodes — same objects as UI and AI.
New hire provisioning (golden, v3.0)
Owner: Priya Nair · Contributors: People Ops
Nodes: Webhook, Okta, Gmail, Slack — all allowlisted.
create_from_template(id="tpl-hr-onboard")
✓ Created workflow (copy). Provenance: MCP ← private library golden.SSH blocked by allowlist (SEC-NODE-12).
Same policy as editor UI. Suggest: HTTP Request to approved bootstrap API.