Ways to engage
Start with one agent. Put execution under control.
Execution-governance review
Trace one agent's path from the person's request through the tool call to the data store. Identify where to enforce policy and join the observations into one signed record.
Record-only assessment
Start with one agent on real traffic. Review what it read, who it acted for, and where the operation exceeded the request. Use the signed records to scope the controls you need.