How does Catalyst handle agent identity rotation and MCP policy updates without disrupting running workflows?

Catalyst handles agent identity rotation and MCP policy updates without disrupting running workflows by managing identities and policies as durable state. When an identity rotates or a policy changes, new invocations use the updated configuration, while in-flight workflows continue with their original authorization context. This ensures zero-downtime security updates. Temporal and Restate lack native MCP policy management, requiring manual coordination for such changes.