One thing that surprised us: gateways and logs were useful, but insufficient. The real gaps appeared when execution spanned multiple agents, tools, and identities over time. Would love to hear how others are handling this today.