20269 essays
The agent card is not a warrant
An agent can advertise a skill, endpoint, and authentication scheme without establishing that it should perform a particular task for a particular caller.
Evaluate the route, not only the model
A model router can pass every component test and still assign the wrong level of capability, cost, or scrutiny to the cases that matter.
A trace is a vocabulary, not a verdict
Shared telemetry names agent, model, and tool operations consistently, but observability data still requires custody, interpretation, and policy context.
Portable evidence needs a public clock
Signed evidence becomes more durable when an independent transparency service can prove that a statement existed under a known policy at a particular place in an append-only history.
Give the agent a workload identity
An agent name, session ID, and user token answer different questions; consequential services need a cryptographic identity for the running workload itself.
A token should know where it is going
Audience-bound tokens keep an agent credential intended for one service from becoming portable authority across every service in its path.
Agent performance depends on how much time, computation, retrying, tool use, and human assistance each attempt is allowed to consume.
A schema can make a tool call well-formed while leaving its meaning, side effects, and trustworthiness unresolved.
Completion is a claim about a task
Durable agent tasks create a shared lifecycle, but a completed state does not prove that the intended outcome occurred.