Agentic – Controls (WAF-AGN)

Agents must be authenticated and addressable.

Not every agent should be able to use every tool. Tool use must be approved, logged, and limited.

Decisions must be traceable – not a black box.

Memories and states must be managed consistently.

Fail-safe, alignment, and verification must be in place.

Many agents must be coordinated.

Agent activities must be visible and measurable.

Human approval for sensitive decisions.

Agent operations must be economic and performant.

Known limitations must be documented.