Section 3
Control plane
Twelve agents. One has been quietly active.
Acts 1 and 2 wired everything up. Now you're looking at the full estate: who's connected, what they've been doing, and the one that shouldn't still be.
We start where Section 1 left off — the audit log — and follow a single scope (loans:export) to an agent that's been quietly active. Then we look at the Agent Directory, drill into the suspect, and revoke it. One click. Every token, gone.