Don't Trust the Checkmark: Verifying Agent Provenance From the Outside

Every agent-trust system ships a checkmark. The certificate verifies. The audit log is consistent. The lineage is sound. Green tick, ship it. Here's the thing about that checkmark: in almost every cas...