Six signals today, one argument running through them: enterprises are deploying agents at a rate their control models were never built to survive. Entrust's COO states it plainly, traditional controls break at volume, not capability. Policies written for human actors fail on latency, scale, and audit trail the moment agents outnumber employees and run continuously.
The index confirms the gap. Organization sits at 72 with Workforce AI Access up a point and Scaling Maturity at 69. The On migration is what that Scaling Maturity number is tracking: a small internal team ran 15 agent-led migrations, cutting per-service time from three months to two weeks. That is a Compiled Corporation result, a multi-month professional services engagement compressed into a two-week internal operation. The throughput is real. The provisioning speed it implies is the risk.
Here is the asymmetry that should move a principal before 9am. Org-layer capability is climbing while the governance primitives arrive piecemeal and late. Google's Android Enterprise controls enforce a work profile boundary at the device edge, then leave cloud-side processing unaddressed, an agent blocked at the device can still reach data through a cloud call. Scalekit's security questionnaire answers the two questions every security review reaches first, key custody and deployment residency, and the fact that it reads as a reference format tells you procurement teams do not yet have one. BigCommerce's tokenized credential architecture names four competing protocols, ACP, UCP, MCP, AP2, which means interoperability is still contestable and proprietary lock-in is still available to whoever moves first.
The brand dimension holds at 44 with zero delta, the weakest score in the index, and OpenAI's EU agentic framing sharpens why. Under the AI Act, agentic workflows are where classification and conformity obligations concentrate. A commerce agent transacting on behalf of a brand carries that brand's trust contract into every transaction, a Janus Brands exposure that no device-layer control touches.
The action is narrow and it is this week's, not next quarter's. Treat agent governance as a procurement requirement now. Put key custody, deployment residency, and protocol alignment into vendor contracts before the stack hardens around incompatible credential flows. The enterprises still treating AI as a point-tool question will inherit a control debt that compounds at agent speed.
Watch item: the agent safety platform market is projected at 11.0 billion dollars by 2035 per Market.us, with Palo Alto Networks' February 2026 CyberArk acquisition flagged as structural consolidation. Watch whether platform-layer safety vendors begin absorbing identity governance vendors. If the control stack consolidates around a handful of integrated providers, your procurement leverage on custody and residency narrows fast.