[artem_am]

Interesting approach. One thing worth considering alongside this is that a lot of agent risk sits at the network layer before the HTTP payload. An agent that can reach any endpoint at all is already a problem regardless of whether the content looks malicious. Pilot Protocol handles this differently: agents are invisible by default and can only reach peers they've mutually handshaked with. Complementary to what you're doing here, not a replacement.