Modelling workflows independently of eg Cowork, Codex, Managed Agents etc gives you auditing, automatic optimisation, and intentional security boundaries. AWML shows who does each step, where information crosses permission boundaries, and which platform runs it.
The refused read is the line I'd want most. One question from testing AI-written code: scopes are sets of people, so when one person owns both the AI step that writes the code and the check's expected results, can AWML still draw that the writing step must never read them?
Scopes aren't just sets of people - they represent any permission boundary, so yes this should be possible. Do try it and let me know if you get stuck!