Topic
Frameworks and control planes for governing what autonomous agents are permitted to do at runtime.
Workday made its MCP server, SQL access to live data and a shared agent runtime generally available on Tuesday. Agents built in Claude Code or Cursor run under the signed-in user's permissions, the company says.
Reality
Cognitum One released a new Ruflo on October 13 that turns one coding assistant into a swarm of 100+ agents. The parts worth copying are the controls around the model: approval modes, cost visibility and data gating.
Reality
Stacklok open-sourced Mecatl, a coding-agent harness split into separate services for organizations that want to run hundreds of sessions on Kubernetes. The company argues that a harness built as one laptop process has to become a distributed system once agents run unattended.
Reality
An open-source AgentCore node moves memory, sandboxed execution and tool access into a managed harness. The install is the easy part; the access decisions do not move.
Reality
Salesforce is pushing its business logic and permissions into other companies' interfaces. For the admin rolling this out, the decision is which permission set a skill runs under when it fires from a chat window.
Reality
The journal chains each record's hash into the next, so a one-line edit to a refusal surfaced as a numbered record; anyone able to rerun the writer can still recompute the chain and pass the check.
Reality
Headless 360 makes capabilities that used to sit behind the Salesforce console callable as APIs, MCP tools and CLI commands, and more than 60 of the new tools point coding agents such as Claude Code and Cursor at live orgs.
Reality
Frames builds forms and scenario planners from a prompt and wires them into the live planning model, which means it inherits the access rights already sitting there along with any mistakes in them, and hands a human the job of certifying formulas an agent wrote.
Reality
Pillar Security's Dor Sarig argues the non-human identity buildout answers who an agent is rather than what it does, and cites an internal agent any Slack message could trigger across a thousand private repositories.
Reality
AWS now ships a first-party catalog for agents, tools, skills and MCP servers, moving the hard part off building them and onto whoever keeps the records current and clears the approval queue, a staffing question as much as a platform one.
Reality
VMware Private AI Cloud stacks inference, deny-by-default agent sandboxes and token metering on Cloud Foundation 9, so the sovereignty pitch now arrives attached to an infrastructure contract platform teams already signed.
Reality
A dev.to writeup traces about sixty commits that landed under a colleague's git identity, and the server-side rebuild that followed fixed dependency drift while leaving the question of who authored what exactly where it was.
Reality
Agent Governance Toolkit puts policy checks in the execution path rather than the prompt. The seam: the kernel is middleware inside the agent's process, so containers still do the isolating.
Reality