Agent governance is consolidating into its own infrastructure category.

Runlayer raised a $30M Series A co-led by Felicis and Khosla to build a control plane that brokers what enterprise agents can access across tools and data (Tech Startups). It lands the same week MCP's Enterprise-Managed Authorization extension went stable and Vercel shipped "Passport" for shadow-AI control. Three signals, one direction: permissioning and audit for agents is becoming its own layer. This is the unglamorous plumbing Karpathy was pointing at, now getting funded. Production agent rollouts hinge as much on access control as on model quality.