Part 2: The Model and the Toolset Are Artifacts Too

An agent's behaviour is set by its container, its weights, and its tools. Model signing now has a credible, versioned answer — Sigstore model-transparency v1.0. Tool-definition provenance does not: as of July 2026, the official MCP Registry verifies who published a server, not what is in it.