Govern natively, federate outward, and what breaks across trust domains

What this post added

This post introduces the concept of federating trust outward from a native governance plane to existing identity providers and workload identity systems, addressing the challenge of organizational heterogeneity. It discusses the use of standards like SPIFFE, WIMSE, and OIDC for composing solutions across trust domains. The post also emphasizes the need to scale controls based on an agent's blast radius and identifies cross-trust domain interaction as an open problem.