Agent identity & gateway controls — runtime security & MCP hardening

The emerging gateway pattern combines default-deny policy, scoped and short-lived credentials, registries, method/resource controls, approval boundaries, tracing, revocation, and kill switches. Enterprise integrations increasingly demonstrate governed access, but real-world bypass rates, false positives, attribution quality, cross-tenant isolation, and operational overhead remain poorly measured.