Agent governance landed in three unrelated layers of the stack inside ten days.

Google Cloud moved seven Gemini Enterprise Agent Platform features to GA on July 29, including Agent Identity as a native SPIFFE-based IAM type with least-privilege enforcement and non-repudiable auditing, plus Gateway, Registry, Evaluation, Observability, Memory Bank, and a Runtime supporting agents running continuously up to seven days. Anaconda acquired Enkrypt AI on August 4 for security, compliance and governance across models, agents and MCP servers. Toolport shipped tool integrity checks, quarantine and OS-keychain secrets as free OSS August 8. Cloud platform, data-science distro and indie tool reached the same conclusion in ten days: an agent needs an identity, an audit trail and a permission boundary before it needs more capability.