The workflow builder now enforces role-based permissions inline. Edit and publish actions are gated based on user roles with contextual tooltips, and users without write access automatically enter view-only mode.