Agent gateways are becoming commodity infrastructure, but their native policy engines are not interchangeable. Externalising the decision point — one place where every gateway asks whether a call should proceed — is what keeps identity, authorization, and audit coherent as gateway sprawl arrives.

Anthropic's cybersecurity-eval incident generalises far beyond cybersecurity evaluations: any system that infers its own scope rather than having it enforced is exposed the same way. Bounded autonomy requires controls that sit inline where actions happen — just-in-time access, explicit scope at tool and network boundaries, continuous observation, and the ability to stop, revoke, and investigate.

The strategic question is not which agent framework an organisation mandates. It is whether changing frameworks means rebuilding the controls that make agentic systems trustworthy. That is why delegated authority — enforced at a shared Agent Gateway layer — matters more than the framework choice.

Gartner projects the average Fortune 500 will run over 150,000 AI agents by 2028, up from fewer than 15 today, with only 13% of organizations having adequate governance. Without a shared coordination layer, you are not running a multi-agent system — you are running a distributed system with no contract between its components.