Couplet 5

In short: autonomous agents have no person to borrow identity from, so ownership and secrets become the core questions. If you cannot list your agents and their owners, discovery comes first. If you can, the next problem is usually the API keys and service account secrets they hold.