Three vendors in three unrelated categories shipped agents that supervise other agents inside two weeks.

Norm Ai (legal/compliance, $120M Series C, July 7) is building supervisory agents to audit customers' other AI deployments. Snyk (devtools/security, GA June 29) shipped Evo ADS to police MCP servers and coding agents at runtime. Vanta (GRC, GA this month) shipped an AI Agent plus an Agent for Risk to unify internal and third-party risk, explicitly targeting shadow AI. Three categories, one product shape. The second-order market, governance of autonomous agents, is being staked out before the first-order agent market has consolidated. That's either very early or very smart, and it's usually both. The counter-argument on Vanta specifically: auditors still need attestable provenance, and nobody has shown regulators accept agent-collected evidence.