[{"data":1,"prerenderedAt":1193},["ShallowReactive",2],{"cycle-doc-bob-wire-c15-agent-native-audit.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":18},{"id":5,"title":6},"c15","Agent Dashboard",{"id":8,"label":9},"bob-wire","Bob-Wire","agent-native-audit.md","c15 — Agent-Native Audit: Did the Egress-Traffic Hypothesis Leak In?",[13,14,15,16,17],"Root cause","Per-page verdict","Vocabulary to purge vs. adopt","What's entirely missing (no page covers these)","Recommendation",{"type":19,"children":20},"root",[21,50,69,307,315,321,348,369,374,401,427,432,437,444,480,530,536,586,608,643,698,726,739,782,818,839,881,909,914,924,941,946,951,1023,1028,1054,1173],{"type":22,"tag":23,"props":24,"children":25},"element","p",{},[26,33,35,41,43,48],{"type":22,"tag":27,"props":28,"children":29},"strong",{},[30],{"type":31,"value":32},"text","Question (from the requester):",{"type":31,"value":34}," We are shifting ",{"type":22,"tag":36,"props":37,"children":38},"em",{},[39],{"type":31,"value":40},"completely",{"type":31,"value":42}," to an agents ecosystem.\nAnalyze each persona-app page for relevance to agents, and make sure none of our old\nhypothesis — ",{"type":22,"tag":27,"props":44,"children":45},{},[46],{"type":31,"value":47},"egress-traffic governance",{"type":31,"value":49}," — leaked in.",{"type":22,"tag":23,"props":51,"children":52},{},[53,58,60,67],{"type":22,"tag":27,"props":54,"children":55},{},[56],{"type":31,"value":57},"Short answer: it leaked in pervasively.",{"type":31,"value":59}," Almost every page is the old traffic-observability\nproduct wearing agent vocabulary. Evidence (term counts in the actual ",{"type":22,"tag":61,"props":62,"children":64},"code",{"className":63},[],[65],{"type":31,"value":66},".vue",{"type":31,"value":68}," source):",{"type":22,"tag":70,"props":71,"children":72},"table",{},[73,95],{"type":22,"tag":74,"props":75,"children":76},"thead",{},[77],{"type":22,"tag":78,"props":79,"children":80},"tr",{},[81,85,90],{"type":22,"tag":82,"props":83,"children":84},"th",{},[],{"type":22,"tag":82,"props":86,"children":87},{},[88],{"type":31,"value":89},"traffic terms",{"type":22,"tag":82,"props":91,"children":92},{},[93],{"type":31,"value":94},"agent-native terms",{"type":22,"tag":96,"props":97,"children":98},"tbody",{},[99,118,135,153,171,189,206,223,240,256,273,291],{"type":22,"tag":78,"props":100,"children":101},{},[102,108,113],{"type":22,"tag":103,"props":104,"children":105},"td",{},[106],{"type":31,"value":107},"audit-trail",{"type":22,"tag":103,"props":109,"children":110},{},[111],{"type":31,"value":112},"34",{"type":22,"tag":103,"props":114,"children":115},{},[116],{"type":31,"value":117},"4",{"type":22,"tag":78,"props":119,"children":120},{},[121,126,131],{"type":22,"tag":103,"props":122,"children":123},{},[124],{"type":31,"value":125},"stacks",{"type":22,"tag":103,"props":127,"children":128},{},[129],{"type":31,"value":130},"45",{"type":22,"tag":103,"props":132,"children":133},{},[134],{"type":31,"value":117},{"type":22,"tag":78,"props":136,"children":137},{},[138,143,148],{"type":22,"tag":103,"props":139,"children":140},{},[141],{"type":31,"value":142},"sensor-coverage",{"type":22,"tag":103,"props":144,"children":145},{},[146],{"type":31,"value":147},"26",{"type":22,"tag":103,"props":149,"children":150},{},[151],{"type":31,"value":152},"0",{"type":22,"tag":78,"props":154,"children":155},{},[156,161,166],{"type":22,"tag":103,"props":157,"children":158},{},[159],{"type":31,"value":160},"agent-reliability",{"type":22,"tag":103,"props":162,"children":163},{},[164],{"type":31,"value":165},"20",{"type":22,"tag":103,"props":167,"children":168},{},[169],{"type":31,"value":170},"3",{"type":22,"tag":78,"props":172,"children":173},{},[174,179,184],{"type":22,"tag":103,"props":175,"children":176},{},[177],{"type":31,"value":178},"egress-matrix",{"type":22,"tag":103,"props":180,"children":181},{},[182],{"type":31,"value":183},"19",{"type":22,"tag":103,"props":185,"children":186},{},[187],{"type":31,"value":188},"13*",{"type":22,"tag":78,"props":190,"children":191},{},[192,197,202],{"type":22,"tag":103,"props":193,"children":194},{},[195],{"type":31,"value":196},"agent-registry",{"type":22,"tag":103,"props":198,"children":199},{},[200],{"type":31,"value":201},"15",{"type":22,"tag":103,"props":203,"children":204},{},[205],{"type":31,"value":152},{"type":22,"tag":78,"props":207,"children":208},{},[209,214,219],{"type":22,"tag":103,"props":210,"children":211},{},[212],{"type":31,"value":213},"dataset-views",{"type":22,"tag":103,"props":215,"children":216},{},[217],{"type":31,"value":218},"14",{"type":22,"tag":103,"props":220,"children":221},{},[222],{"type":31,"value":152},{"type":22,"tag":78,"props":224,"children":225},{},[226,231,236],{"type":22,"tag":103,"props":227,"children":228},{},[229],{"type":31,"value":230},"data-residency",{"type":22,"tag":103,"props":232,"children":233},{},[234],{"type":31,"value":235},"12",{"type":22,"tag":103,"props":237,"children":238},{},[239],{"type":31,"value":152},{"type":22,"tag":78,"props":241,"children":242},{},[243,248,252],{"type":22,"tag":103,"props":244,"children":245},{},[246],{"type":31,"value":247},"posture-board",{"type":22,"tag":103,"props":249,"children":250},{},[251],{"type":31,"value":235},{"type":22,"tag":103,"props":253,"children":254},{},[255],{"type":31,"value":152},{"type":22,"tag":78,"props":257,"children":258},{},[259,264,269],{"type":22,"tag":103,"props":260,"children":261},{},[262],{"type":31,"value":263},"data-flow",{"type":22,"tag":103,"props":265,"children":266},{},[267],{"type":31,"value":268},"10",{"type":22,"tag":103,"props":270,"children":271},{},[272],{"type":31,"value":152},{"type":22,"tag":78,"props":274,"children":275},{},[276,281,286],{"type":22,"tag":103,"props":277,"children":278},{},[279],{"type":31,"value":280},"risk-report",{"type":22,"tag":103,"props":282,"children":283},{},[284],{"type":31,"value":285},"7",{"type":22,"tag":103,"props":287,"children":288},{},[289],{"type":31,"value":290},"1",{"type":22,"tag":78,"props":292,"children":293},{},[294,299,303],{"type":22,"tag":103,"props":295,"children":296},{},[297],{"type":31,"value":298},"agent-spend",{"type":22,"tag":103,"props":300,"children":301},{},[302],{"type":31,"value":170},{"type":22,"tag":103,"props":304,"children":305},{},[306],{"type":31,"value":152},{"type":22,"tag":23,"props":308,"children":309},{},[310],{"type":22,"tag":36,"props":311,"children":312},{},[313],{"type":31,"value":314},"*egress-matrix's \"agent\" hits are mostly \"Tool APIs\" used as a network destination class — not capability framing.",{"type":22,"tag":316,"props":317,"children":319},"h2",{"id":318},"root-cause",[320],{"type":31,"value":13},{"type":22,"tag":23,"props":322,"children":323},{},[324,326,331,333,339,341,346],{"type":31,"value":325},"c15 descends from ",{"type":22,"tag":27,"props":327,"children":328},{},[329],{"type":31,"value":330},"Phase 1",{"type":31,"value":332},", which re-framed ",{"type":22,"tag":61,"props":334,"children":336},{"className":335},[],[337],{"type":31,"value":338},"app.qpoint.io",{"type":31,"value":340}," — an ",{"type":22,"tag":27,"props":342,"children":343},{},[344],{"type":31,"value":345},"API\u002Ftraffic\nobservability product",{"type":31,"value":347}," — \"through an agent-governance lens.\" That lens silently encoded a\nmental model:",{"type":22,"tag":349,"props":350,"children":351},"blockquote",{},[352],{"type":22,"tag":23,"props":353,"children":354},{},[355,360,362,367],{"type":22,"tag":27,"props":356,"children":357},{},[358],{"type":31,"value":359},"OLD model (leaked):",{"type":31,"value":361}," an agent is a ",{"type":22,"tag":36,"props":363,"children":364},{},[365],{"type":31,"value":366},"source of network egress",{"type":31,"value":368},". Governance = observe and\ncontrol its outbound traffic (destinations, requests, bytes, sensors, proxy enforcement).",{"type":22,"tag":23,"props":370,"children":371},{},[372],{"type":31,"value":373},"The agents ecosystem needs the opposite mental model:",{"type":22,"tag":349,"props":375,"children":376},{},[377],{"type":22,"tag":23,"props":378,"children":379},{},[380,385,387,392,394,399],{"type":22,"tag":27,"props":381,"children":382},{},[383],{"type":31,"value":384},"NEW model (target):",{"type":31,"value":386}," an agent is an ",{"type":22,"tag":36,"props":388,"children":389},{},[390],{"type":31,"value":391},"autonomous actor",{"type":31,"value":393},". Governance = control and observe\nits ",{"type":22,"tag":27,"props":395,"children":396},{},[397],{"type":31,"value":398},"capabilities, actions, instructions, decisions, and outcomes",{"type":31,"value":400}," — most of which never\nappear as network egress at all.",{"type":22,"tag":23,"props":402,"children":403},{},[404,406,411,413,418,420,425],{"type":31,"value":405},"The leak isn't cosmetic wording — it's the ",{"type":22,"tag":27,"props":407,"children":408},{},[409],{"type":31,"value":410},"unit of analysis",{"type":31,"value":412},". The whole app reasons about\n",{"type":22,"tag":36,"props":414,"children":415},{},[416],{"type":31,"value":417},"network destinations and requests",{"type":31,"value":419}," when it should reason about ",{"type":22,"tag":36,"props":421,"children":422},{},[423],{"type":31,"value":424},"actions, tools, tasks, and\nbehavior",{"type":31,"value":426},".",{"type":22,"tag":316,"props":428,"children":430},{"id":429},"per-page-verdict",[431],{"type":31,"value":14},{"type":22,"tag":23,"props":433,"children":434},{},[435],{"type":31,"value":436},"Relevance = how agent-native the page is (0 = pure traffic governance, 5 = fully agent-native).",{"type":22,"tag":438,"props":439,"children":441},"h3",{"id":440},"keep-agent-native-at-the-core",[442],{"type":31,"value":443},"Keep (agent-native at the core)",{"type":22,"tag":23,"props":445,"children":446},{},[447,457,459,464,466,471,473,478],{"type":22,"tag":27,"props":448,"children":449},{},[450,455],{"type":22,"tag":61,"props":451,"children":453},{"className":452},[],[454],{"type":31,"value":298},{"type":31,"value":456}," — Relevance 4 · Keep, minor reframe.",{"type":31,"value":458},"\nCost\u002Fspend per agent is genuinely agent-native and a real gap-closer. Leak: it ",{"type":22,"tag":36,"props":460,"children":461},{},[462],{"type":31,"value":463},"derives spend\nfrom \"agent egress\" bytes",{"type":31,"value":465}," and uses \"cost \u002F 1k ",{"type":22,"tag":27,"props":467,"children":468},{},[469],{"type":31,"value":470},"req",{"type":31,"value":472},".\" Agents are metered by ",{"type":22,"tag":27,"props":474,"children":475},{},[476],{"type":31,"value":477},"invocations,\ntokens, and tool calls",{"type":31,"value":479},", not egress volume. Fix: meter by agent run \u002F task \u002F tokens; drop\n\"egress-derived\" and \"requests.\"",{"type":22,"tag":23,"props":481,"children":482},{},[483,493,495,500,502,507,509,514,516,521,523,528],{"type":22,"tag":27,"props":484,"children":485},{},[486,491],{"type":22,"tag":61,"props":487,"children":489},{"className":488},[],[490],{"type":31,"value":280},{"type":31,"value":492}," — Relevance 3 · Keep the container, replace the contents.",{"type":31,"value":494},"\nA ranked risk register is framing-agnostic. But every finding is a ",{"type":22,"tag":36,"props":496,"children":497},{},[498],{"type":31,"value":499},"traffic",{"type":31,"value":501}," finding (\"PII →\nunapproved LLM endpoint,\" \"egress is default-allow,\" \"agent calling OpenAI\"). Agent-native\nfindings: unauthorized ",{"type":22,"tag":27,"props":503,"children":504},{},[505],{"type":31,"value":506},"action",{"type":31,"value":508}," taken, ",{"type":22,"tag":27,"props":510,"children":511},{},[512],{"type":31,"value":513},"instructions",{"type":31,"value":515}," modified, excessive ",{"type":22,"tag":27,"props":517,"children":518},{},[519],{"type":31,"value":520},"tool",{"type":31,"value":522},"\npermissions, ",{"type":22,"tag":27,"props":524,"children":525},{},[526],{"type":31,"value":527},"task",{"type":31,"value":529}," failure spike, prompt-injection detected, goal misalignment.",{"type":22,"tag":438,"props":531,"children":533},{"id":532},"reframe-right-idea-traffic-rooted-execution",[534],{"type":31,"value":535},"Reframe (right idea, traffic-rooted execution)",{"type":22,"tag":23,"props":537,"children":538},{},[539,549,551,556,558,563,565,570,572,577,579,584],{"type":22,"tag":27,"props":540,"children":541},{},[542,547],{"type":22,"tag":61,"props":543,"children":545},{"className":544},[],[546],{"type":31,"value":196},{"type":31,"value":548}," — Relevance 3 · Reframe.",{"type":31,"value":550},"\nAn inventory of agents is core agent-native. But the profile describes each agent by ",{"type":22,"tag":36,"props":552,"children":553},{},[554],{"type":31,"value":555},"egress\ndestinations, API tokens, and data-scope",{"type":31,"value":557}," — network identity. An agent profile should be:\npurpose\u002Fgoal, ",{"type":22,"tag":27,"props":559,"children":560},{},[561],{"type":31,"value":562},"capabilities & tools",{"type":31,"value":564}," it can use, ",{"type":22,"tag":27,"props":566,"children":567},{},[568],{"type":31,"value":569},"instructions\u002Fsystem prompt",{"type":31,"value":571},", ",{"type":22,"tag":27,"props":573,"children":574},{},[575],{"type":31,"value":576},"autonomy\nlevel",{"type":31,"value":578},", owning human, recent ",{"type":22,"tag":27,"props":580,"children":581},{},[582],{"type":31,"value":583},"tasks & outcomes",{"type":31,"value":585},". Identity ≠ API credential.",{"type":22,"tag":23,"props":587,"children":588},{},[589,599,601,606],{"type":22,"tag":27,"props":590,"children":591},{},[592,597],{"type":22,"tag":61,"props":593,"children":595},{"className":594},[],[596],{"type":31,"value":247},{"type":31,"value":598}," — Relevance 2 · Reframe.",{"type":31,"value":600},"\nThe index is fine; its ",{"type":22,"tag":27,"props":602,"children":603},{},[604],{"type":31,"value":605},"categories",{"type":31,"value":607}," are traffic governance: \"Egress Control,\" \"Coverage\"\n(=sensor coverage). Agent-native posture dimensions: Capability\u002Fleast-privilege, Action-safety\n(guardrails on dangerous actions), Instruction integrity, Autonomy controls (human-in-the-loop),\nOutcome quality, Spend discipline.",{"type":22,"tag":23,"props":609,"children":610},{},[611,620,622,628,630,635,637,641],{"type":22,"tag":27,"props":612,"children":613},{},[614,619],{"type":22,"tag":61,"props":615,"children":617},{"className":616},[],[618],{"type":31,"value":160},{"type":31,"value":598},{"type":31,"value":621},"\nPure network SLO (availability %, p95 latency, error rate, retry storms) — this is\n",{"type":22,"tag":61,"props":623,"children":625},{"className":624},[],[626],{"type":31,"value":627},"\u002Ftraffic\u002Fperformance",{"type":31,"value":629},". Agent reliability = ",{"type":22,"tag":27,"props":631,"children":632},{},[633],{"type":31,"value":634},"task success rate, goal completion, output\nquality, hallucination\u002Ferror rate, human-intervention rate",{"type":31,"value":636},". A slow HTTP call is not the agent\nreliability story; a failed ",{"type":22,"tag":36,"props":638,"children":639},{},[640],{"type":31,"value":527},{"type":31,"value":642}," is.",{"type":22,"tag":23,"props":644,"children":645},{},[646,655,657,662,664,669,671,676,678,683,685,690,692,697],{"type":22,"tag":27,"props":647,"children":648},{},[649,654],{"type":22,"tag":61,"props":650,"children":652},{"className":651},[],[653],{"type":31,"value":263},{"type":31,"value":598},{"type":31,"value":656},"\n\"Sensitive data → LLM ",{"type":22,"tag":27,"props":658,"children":659},{},[660],{"type":31,"value":661},"endpoint",{"type":31,"value":663},"\" is a network-egress flow. The agent-native concern is\ndata-in-",{"type":22,"tag":27,"props":665,"children":666},{},[667],{"type":31,"value":668},"context",{"type":31,"value":670},": what data an agent ",{"type":22,"tag":27,"props":672,"children":673},{},[674],{"type":31,"value":675},"reads into a prompt",{"type":31,"value":677}," or moves ",{"type":22,"tag":27,"props":679,"children":680},{},[681],{"type":31,"value":682},"via a tool",{"type":31,"value":684}," (export,\nemail, write). Reframe producer→agent→",{"type":22,"tag":36,"props":686,"children":687},{},[688],{"type":31,"value":689},"tool\u002Faction",{"type":31,"value":691},", not producer→agent→",{"type":22,"tag":36,"props":693,"children":694},{},[695],{"type":31,"value":696},"destination",{"type":31,"value":426},{"type":22,"tag":23,"props":699,"children":700},{},[701,710,712,717,719,724],{"type":22,"tag":27,"props":702,"children":703},{},[704,709],{"type":22,"tag":61,"props":705,"children":707},{"className":706},[],[708],{"type":31,"value":213},{"type":31,"value":548},{"type":31,"value":711},"\nScoping what an agent can access is agent-relevant, but it's framed as \"views over the\n",{"type":22,"tag":27,"props":713,"children":714},{},[715],{"type":31,"value":716},"traffic dataset",{"type":31,"value":718},".\" Agent-native: what ",{"type":22,"tag":27,"props":720,"children":721},{},[722],{"type":31,"value":723},"knowledge \u002F memory \u002F data sources \u002F RAG corpora",{"type":31,"value":725},"\nan agent may read — retrieval scope, not a filter over captured traffic.",{"type":22,"tag":438,"props":727,"children":729},{"id":728},"replace-the-page-is-the-old-hypothesis",[730,732,737],{"type":31,"value":731},"Replace (the page ",{"type":22,"tag":36,"props":733,"children":734},{},[735],{"type":31,"value":736},"is",{"type":31,"value":738}," the old hypothesis)",{"type":22,"tag":23,"props":740,"children":741},{},[742,752,754,759,761,766,768,773,775,780],{"type":22,"tag":27,"props":743,"children":744},{},[745,750],{"type":22,"tag":61,"props":746,"children":748},{"className":747},[],[749],{"type":31,"value":178},{"type":31,"value":751}," — Relevance 1 · Replace.",{"type":31,"value":753},"\nThe clearest leak — literally \"Egress Control,\" agents × ",{"type":22,"tag":27,"props":755,"children":756},{},[757],{"type":31,"value":758},"network destination classes",{"type":31,"value":760},"\n(Approved\u002FUnapproved LLMs, Tool APIs, Internal, Unknown), default-allow\u002Fdeny on domains.\nReplace with a ",{"type":22,"tag":27,"props":762,"children":763},{},[764],{"type":31,"value":765},"Capability \u002F Action Authorization matrix",{"type":31,"value":767},": agents × ",{"type":22,"tag":27,"props":769,"children":770},{},[771],{"type":31,"value":772},"what they may do",{"type":31,"value":774},"\n(use the email tool, write to prod DB, execute payments, call sub-agents) — authorize\n",{"type":22,"tag":36,"props":776,"children":777},{},[778],{"type":31,"value":779},"actions",{"type":31,"value":781},", not destinations.",{"type":22,"tag":23,"props":783,"children":784},{},[785,794,796,801,803,809,811,816],{"type":22,"tag":27,"props":786,"children":787},{},[788,793],{"type":22,"tag":61,"props":789,"children":791},{"className":790},[],[792],{"type":31,"value":107},{"type":31,"value":751},{"type":31,"value":795},"\nNamed \"Agent ",{"type":22,"tag":27,"props":797,"children":798},{},[799],{"type":31,"value":800},"Egress",{"type":31,"value":802}," Audit Trail\" — an HTTP request log (method, status, destination, token,\nverdict). This is ",{"type":22,"tag":61,"props":804,"children":806},{"className":805},[],[807],{"type":31,"value":808},"\u002Ftraffic\u002Frequests",{"type":31,"value":810},". Replace with an ",{"type":22,"tag":27,"props":812,"children":813},{},[814],{"type":31,"value":815},"Agent Activity \u002F Decision log",{"type":31,"value":817},": the\ntask the agent pursued, its reasoning\u002Ftool-call trace, the actions it took, and the outcome —\nnot packets.",{"type":22,"tag":23,"props":819,"children":820},{},[821,830,832,837],{"type":22,"tag":27,"props":822,"children":823},{},[824,829],{"type":22,"tag":61,"props":825,"children":827},{"className":826},[],[828],{"type":31,"value":125},{"type":31,"value":751},{"type":31,"value":831},"\nProxy\u002Fmiddleware enforcement chain (\"LLM Allow\u002FDeny,\" \"PII Redaction\" adapters) = the Qproxy\nstack. Replace with ",{"type":22,"tag":27,"props":833,"children":834},{},[835],{"type":31,"value":836},"Action Guardrails & Approvals",{"type":31,"value":838},": policy on what agents may do, required\nhuman approvals for high-risk actions, tool-permission gates — guardrails on behavior, not a\nnetwork pipeline.",{"type":22,"tag":23,"props":840,"children":841},{},[842,851,853,858,860,865,867,872,874,879],{"type":22,"tag":27,"props":843,"children":844},{},[845,850],{"type":22,"tag":61,"props":846,"children":848},{"className":847},[],[849],{"type":31,"value":142},{"type":31,"value":751},{"type":31,"value":852},"\nEntirely network-capture (\"% of agent ",{"type":22,"tag":27,"props":854,"children":855},{},[856],{"type":31,"value":857},"egress",{"type":31,"value":859}," under sensor coverage,\" \"egress capture on\u002Foff,\"\n\"deploy sensor\"). Replace with ",{"type":22,"tag":27,"props":861,"children":862},{},[863],{"type":31,"value":864},"Agent Instrumentation Coverage",{"type":31,"value":866},": which agents\u002Fruntimes\u002F\nframeworks are registered and reporting their actions — are we seeing agent ",{"type":22,"tag":36,"props":868,"children":869},{},[870],{"type":31,"value":871},"behavior",{"type":31,"value":873},", not\nagent ",{"type":22,"tag":36,"props":875,"children":876},{},[877],{"type":31,"value":878},"packets",{"type":31,"value":880},". Blind spots = unregistered agents, not uncaptured traffic.",{"type":22,"tag":23,"props":882,"children":883},{},[884,893,895,900,902,907],{"type":22,"tag":27,"props":885,"children":886},{},[887,892],{"type":22,"tag":61,"props":888,"children":890},{"className":889},[],[891],{"type":31,"value":230},{"type":31,"value":751},{"type":31,"value":894},"\n\"Where ",{"type":22,"tag":27,"props":896,"children":897},{},[898],{"type":31,"value":899},"payloads",{"type":31,"value":901}," live\" = storage of captured traffic bodies (object store, event store, qscan).\nReplace with ",{"type":22,"tag":27,"props":903,"children":904},{},[905],{"type":31,"value":906},"Agent Memory & Record Stores",{"type":31,"value":908},": where conversation history, agent memory, vector\nstores, and task records live and how long they're retained.",{"type":22,"tag":316,"props":910,"children":912},{"id":911},"vocabulary-to-purge-vs-adopt",[913],{"type":31,"value":15},{"type":22,"tag":23,"props":915,"children":916},{},[917,922],{"type":22,"tag":27,"props":918,"children":919},{},[920],{"type":31,"value":921},"Purge (egress-traffic hypothesis):",{"type":31,"value":923}," egress, endpoint, destination, domain, request,\nconnection, bytes, bandwidth, sensor, traffic capture, proxy, middleware\u002Fadapter chain, p95\u002Fp99\nlatency, payload, allow\u002Fdeny domains, IP, geolocation, \"what it called.\"",{"type":22,"tag":23,"props":925,"children":926},{},[927,932,934,939],{"type":22,"tag":27,"props":928,"children":929},{},[930],{"type":31,"value":931},"Adopt (agents ecosystem):",{"type":31,"value":933}," capability, tool, action, permission\u002Fauthorization, instruction\u002F\nsystem prompt, guardrail, task\u002Frun, goal, outcome\u002Fresult, decision\u002Freasoning trace, autonomy\nlevel, human-in-the-loop\u002Fapproval, delegation\u002Fsub-agent, memory\u002Fknowledge, behavior, \"what it\n",{"type":22,"tag":36,"props":935,"children":936},{},[937],{"type":31,"value":938},"did",{"type":31,"value":940},".\"",{"type":22,"tag":316,"props":942,"children":944},{"id":943},"whats-entirely-missing-no-page-covers-these",[945],{"type":31,"value":16},{"type":22,"tag":23,"props":947,"children":948},{},[949],{"type":31,"value":950},"These are first-class in an agents ecosystem and absent from c15:",{"type":22,"tag":952,"props":953,"children":954},"ol",{},[955,973,983,993,1003,1013],{"type":22,"tag":956,"props":957,"children":958},"li",{},[959,964,966,971],{"type":22,"tag":27,"props":960,"children":961},{},[962],{"type":31,"value":963},"Capability & tool authorization",{"type":31,"value":965}," (what an agent ",{"type":22,"tag":36,"props":967,"children":968},{},[969],{"type":31,"value":970},"can",{"type":31,"value":972}," do).",{"type":22,"tag":956,"props":974,"children":975},{},[976,981],{"type":22,"tag":27,"props":977,"children":978},{},[979],{"type":31,"value":980},"Instruction \u002F prompt governance",{"type":31,"value":982}," (system prompts, guardrails, change control).",{"type":22,"tag":956,"props":984,"children":985},{},[986,991],{"type":22,"tag":27,"props":987,"children":988},{},[989],{"type":31,"value":990},"Task outcomes & quality",{"type":31,"value":992}," (success rate, goal completion, output quality).",{"type":22,"tag":956,"props":994,"children":995},{},[996,1001],{"type":22,"tag":27,"props":997,"children":998},{},[999],{"type":31,"value":1000},"Action guardrails & human approvals",{"type":31,"value":1002}," (high-risk action gating).",{"type":22,"tag":956,"props":1004,"children":1005},{},[1006,1011],{"type":22,"tag":27,"props":1007,"children":1008},{},[1009],{"type":31,"value":1010},"Agent topology \u002F delegation",{"type":31,"value":1012}," (multi-agent: who delegates to whom, sub-agents).",{"type":22,"tag":956,"props":1014,"children":1015},{},[1016,1021],{"type":22,"tag":27,"props":1017,"children":1018},{},[1019],{"type":31,"value":1020},"Behavioral risk",{"type":31,"value":1022}," (unauthorized actions, prompt injection, goal misalignment, harmful output).",{"type":22,"tag":316,"props":1024,"children":1026},{"id":1025},"recommendation",[1027],{"type":31,"value":17},{"type":22,"tag":23,"props":1029,"children":1030},{},[1031,1033,1038,1040,1045,1047,1052],{"type":31,"value":1032},"The leak is structural, not page-by-page — so don't patch wording. Reset the ",{"type":22,"tag":27,"props":1034,"children":1035},{},[1036],{"type":31,"value":1037},"unit of\nanalysis",{"type":31,"value":1039}," from ",{"type":22,"tag":36,"props":1041,"children":1042},{},[1043],{"type":31,"value":1044},"network egress",{"type":31,"value":1046}," to ",{"type":22,"tag":36,"props":1048,"children":1049},{},[1050],{"type":31,"value":1051},"agent actions & outcomes",{"type":31,"value":1053},", then:",{"type":22,"tag":1055,"props":1056,"children":1057},"ul",{},[1058,1092,1119,1163],{"type":22,"tag":956,"props":1059,"children":1060},{},[1061,1066,1068,1073,1074,1079,1080,1085,1086,1091],{"type":22,"tag":27,"props":1062,"children":1063},{},[1064],{"type":31,"value":1065},"Keep & lightly reframe:",{"type":31,"value":1067}," ",{"type":22,"tag":61,"props":1069,"children":1071},{"className":1070},[],[1072],{"type":31,"value":298},{"type":31,"value":571},{"type":22,"tag":61,"props":1075,"children":1077},{"className":1076},[],[1078],{"type":31,"value":280},{"type":31,"value":571},{"type":22,"tag":61,"props":1081,"children":1083},{"className":1082},[],[1084],{"type":31,"value":196},{"type":31,"value":571},{"type":22,"tag":61,"props":1087,"children":1089},{"className":1088},[],[1090],{"type":31,"value":213},{"type":31,"value":426},{"type":22,"tag":956,"props":1093,"children":1094},{},[1095,1100,1101,1106,1107,1112,1113,1118],{"type":22,"tag":27,"props":1096,"children":1097},{},[1098],{"type":31,"value":1099},"Reframe substantively:",{"type":31,"value":1067},{"type":22,"tag":61,"props":1102,"children":1104},{"className":1103},[],[1105],{"type":31,"value":247},{"type":31,"value":571},{"type":22,"tag":61,"props":1108,"children":1110},{"className":1109},[],[1111],{"type":31,"value":160},{"type":31,"value":571},{"type":22,"tag":61,"props":1114,"children":1116},{"className":1115},[],[1117],{"type":31,"value":263},{"type":31,"value":426},{"type":22,"tag":956,"props":1120,"children":1121},{},[1122,1127,1128,1133,1135,1140,1142,1147,1149,1154,1156,1161],{"type":22,"tag":27,"props":1123,"children":1124},{},[1125],{"type":31,"value":1126},"Replace outright:",{"type":31,"value":1067},{"type":22,"tag":61,"props":1129,"children":1131},{"className":1130},[],[1132],{"type":31,"value":178},{"type":31,"value":1134}," → Capability\u002FAction Authorization; ",{"type":22,"tag":61,"props":1136,"children":1138},{"className":1137},[],[1139],{"type":31,"value":107},{"type":31,"value":1141}," →\nAgent Activity\u002FDecision log; ",{"type":22,"tag":61,"props":1143,"children":1145},{"className":1144},[],[1146],{"type":31,"value":125},{"type":31,"value":1148}," → Action Guardrails & Approvals; ",{"type":22,"tag":61,"props":1150,"children":1152},{"className":1151},[],[1153],{"type":31,"value":142},{"type":31,"value":1155}," →\nAgent Instrumentation Coverage; ",{"type":22,"tag":61,"props":1157,"children":1159},{"className":1158},[],[1160],{"type":31,"value":230},{"type":31,"value":1162}," → Agent Memory\u002FRecord stores.",{"type":22,"tag":956,"props":1164,"children":1165},{},[1166,1171],{"type":22,"tag":27,"props":1167,"children":1168},{},[1169],{"type":31,"value":1170},"Add the six missing surfaces above",{"type":31,"value":1172},", leading with Capability\u002FAction Authorization,\nInstruction\u002FPrompt Governance, and Task Outcomes — the spine of agent governance.",{"type":22,"tag":23,"props":1174,"children":1175},{},[1176,1178,1183,1185,1191],{"type":31,"value":1177},"Net: roughly ",{"type":22,"tag":27,"props":1179,"children":1180},{},[1181],{"type":31,"value":1182},"2 of 12 pages are agent-native today; ~5 are reframable; ~5 are the old product\nre-skinned.",{"type":31,"value":1184}," A clean agents-ecosystem pass (",{"type":22,"tag":61,"props":1186,"children":1188},{"className":1187},[],[1189],{"type":31,"value":1190},"wf2",{"type":31,"value":1192},") should be authored from the agent-as-actor\nmodel directly, not derived again from the traffic product.",1794599427265]