Verifiable identity, scoped permissions, and tamper-resistant audit at the layer where the agent acts.
Regulators are moving, but the map is fragmented. Policy is catching up on multiple continents simultaneously, but non-identical regimes creates overlap in requirements agentic systems operating cross-border will need to satisfy.