The control plane for agent identities, server access, and audit decisions.