WAF-AGN-010 – Agent Identity & Authentication Description Every agent must be identifiable, authenticatable, and traceable. Requirements Agent ID is unique and stable Authentication via token or certificate Audit log for all agent interactions Severity: High Automatable: High Controls (WAF-AGN) AGN-020 – Tool Use Governance