Directed Agent Work Nodes: glue agent invocations together behind an independent, fail-closed acceptance gate.