Enforce organizational control on every agent.
Policy, authorization, audit and traceability for the teams responsible for keeping agent adoption within the organization's boundaries.
Security can't be reimplemented by every team.
When each department secures its own agents, the organization ends up with as many security models as there are frameworks in use. A requirement approved once shouldn't need a separate implementation for every technology.
Define once. Enforce everywhere.
The controls security teams expect to have.
Policy enforcement
Enforce security requirements centrally, not team by team.
Authorization
Define which agents can reach which models, tools, data and systems.
Audit trails
Maintain traceability over configuration changes and runs.
Traceability
Understand how an agent evolved and who changed it.