The workflow runtime uses /.well-known/workflow/* endpoints internally. These MUST be public (not protected by auth middleware).
In proxy.ts, ensure this route is in the public routes list:
A minimal Husky pre-commit hook with AI-powered code review via Amp's Oracle feature.