Seven horizontal planes carry the request. Two vertical rails carry the controls. The rails are the point: governance and evidence are not a plane you pass through once, they touch every plane on every call.
Author policy once, version it centrally, and enforce it at every point that touches the outside world. A single physical gateway carrying all model, agent, tool and data traffic becomes a throughput bottleneck, an availability risk and an awkward trust boundary. What must be singular is the policy, not the pipe.
The tool broker exchanges the agent's identity plus the delegated principal scope for a short-lived, audience-bound token at the moment of the call. Nothing standing, nothing shared, nothing that outlives the task, and no token received from a caller is passed through to a downstream service.
The intent, the policy decision and the inputs are logged before the tool executes. If logging fails, the action fails. That ordering is what makes an audit trail defensible rather than best-effort.
If you are standing up an agent platform, tightening the controls on one you already have, or preparing for an audit that now includes agents, I am happy to look at it with you.
Tell me where you are with agents and what you are trying to make safe. I reply to every enquiry within two business days.
