Identity, tool registry, approvals, limits, logs, and kill switch for agents that read data, decide, or execute actions.