“Serval's security architecture is designed so that end-user-facing agents cannot directly access business systems, but can only trigger pre-approved, deterministic workflows built by IT teams.”