run someone else’s workflow

Every workflow published as public. Open one and it runs against your own throwaway testnet accounts, never the author’s — and it cannot be edited, because a published workflow is frozen at its fingerprint. Each one also has an HTTP endpoint, so your agent can run it without a browser.