IBM says each agent can have an identified owner and defined authority. Vault supplies short-lived credentials limited to necessary resources and revocable when access conditions change.
In watsonx Orchestrate, evaluation and cost-tracking capabilities are available; discovery of third-party agents and containment, including a kill switch, remain in technical preview. That distinction matters to IT teams: announcing a control does not mean all its components are ready for routine deployment. Real-world effectiveness still needs assessment in each environment.