Self-hosted rule and workflow engine with scoped permissions, guarded execution and audit history.