Three of today's signals point at the same conclusion from different angles: the enterprise AI control problem has stopped being an application decision and become an infrastructure one.
Start with ModelOp Center 3.5, which adds a discovery service that compares running agents against an approved inventory. The product exists because the problem exists. Shadow AI detection becomes a category only when agents are already running outside approved channels in enough environments to warrant a scanner. That is the Identity Control Surface stated plainly: every running agent needs a known identity, an owner, and an authorized scope, and most enterprises cannot yet answer whether they have that. ModelOp's integrations with Copilot Studio and Bedrock AgentCore mean the registry no longer has to be built from scratch. (Markets Insider)
Fortinet draws the same line at the network layer. Inline inspection of prompts, completions, and MCP tool calls, with model access permissions and spending budgets attached, treats AI traffic the way firewall rules are treated: policy-driven, auditable, enforced before the request lands. (citybiz)
Then NTT DATA says out loud what both products imply. Prompting and output filters do not constitute a control once an AI system has autonomy inside a regulated workflow. Control has to live in the architecture. For a buyer in insurance, healthcare, or financial services, that sentence reframes an AI project as an architecture engagement, and it invalidates the compliance posture most teams are currently running. (NTT DATA)
Read these together and the argument is single: the industry has converged on the view that governance built at the prompt is theater, and governance built into identity, traffic, and system design is defensible. The index backs the timing. Governance & Ethics sits at 79, the highest organizational dimension, while brand holds flat at 44. The capability to govern is maturing faster than the ability to explain it. That gap is where the next failure mode lives: enterprises that buy the control plane but cannot articulate to a regulator or a board what their agents are authorized to do.
The practical move this morning is an inventory question before a procurement one. Before evaluating ModelOp or Fortinet, ask whether you can produce a current list of every agent running against your data, with an owner for each. If you cannot, that is the engagement, and no inline inspection product fixes an architecture that was never designed to be governed.
Watch: Greptile's production use of GPT-6 Astra and Daybreak in developer tooling. If the pattern spreads across OpenAI enterprise customers, GPT-6 moves from benchmark subject to infrastructure dependency, and version-locking agent workflows becomes a governance decision, not an engineering preference.