What happened
Salesforce previewed (Sept 10-11, ahead of Dreamforce) a composable architecture bundling six 'Trusted' capabilities — Context, Agency, Action, Governance, Security, Models — plus a new AI Control Plane that discovers/registers agents, establishes identity and policy, manages lifecycle, and observes behavior across Salesforce and third-party AI. Many underlying technologies are live today; the unified experience and control plane begin rollout in early FY28 (Feb 2027+).
Why it matters
A major CRM/enterprise vendor is formalizing agent identity, policy, and runtime security as a cross-vendor control plane (comparable to ServiceNow's AI Control Tower, Microsoft Agent 365, AWS Bedrock AgentCore), signaling this is becoming a required category rather than a niche add-on.
Applicability
Enterprise security and platform teams running multiple agent frameworks should evaluate the Control Plane's policy/audit coverage now but treat announced architecture as distinct from currently available control coverage until FY28 rollout.