Introduction
The worktop is the transaction-local staging area for resources. When a manifest withdraws tokens from an account, the resulting bucket sits on the worktop until a subsequent instruction takes it back off (e.g., to deposit elsewhere, or to pass into a method call). The worktop exists only for the duration of a transaction — at commit time it must be empty, which is what guarantees no resources can be silently lost or stranded mid-transaction.
