Couplet 1

In short: start with who the agent works for. Some agents act for one named person, such as a copilot or a coding agent. Others run on their own for a system or a pipeline. That single fact decides which identity model, token flow and approval design you need next.