The governance beat
Sarah Kim's segment is not an obstacle, it is a closing argument — show an agent being governed, and let the harness model the discipline it is selling.
- Reframe the governance segment as a closing argument, not a tax
- Name the controls that answer S6 — agent identity, control plane, DORA posture
- Make the harness itself model the governance it is demonstrating
Sarah Kim’s segment decides the deal, and the mistake is treating it as the part to survive. Reframe it: the governance beat is a closing argument. You are not showing an agent acting; you are showing an agent being governed while it acts. For an EU-touching capital-markets firm, that means agents with first-class identities via Entra Agent ID and a control plane to manage them — Agent 365, announced at Ignite 2025⊙ — plus a Purview and DORA posture, since DORA has applied since January 2025 and Purview ships assessment templates for it.⊙ Copilot Studio’s own agent evaluations are GA, with agent identities in preview.⊙
That is success criterion S6: every capability you showed has a governance answer. Deliver it as the confident close it is.
The harness earns the right to make that argument by modeling it. The MCP config you built is allowlisted per environment; the audit hook logs every tool call to a file⊙ ; and the agents are scoped so the researcher cannot write and the operator cannot browse. When Security asks whether your own tooling follows the discipline you are selling, the answer is yes, and you can show the files. A seller whose laptop models the governance being pitched is a seller Security believes.
Why the interlude is timed
There is a craft detail worth stealing: put the governance beat where Security is still in the room and paying attention, not at minute thirty-four when they have mentally checked out. The person who most needs to see an agent governed is Sarah, and the beat is for her. Time it for when she is watching.
In the field
Write the three sentences you would say over the audit log during the governance beat — what it records, why it exists, and what it means for an agent’s blast radius. If you cannot say them in three sentences, the governance story is not yet simple enough to close on.
Part III is done
The environment is modeled, populated, and agented, and governance is a strength rather than a soft spot. In Part IV, you stop building and start rehearsing.