pub fn validate_workflow( graph: &WorkflowGraph, ceiling: Option<&CapabilityPolicy>, ) -> WorkflowValidationReport