Akamai Technologies IncExpanded integration between Akamai and MuleSoft cited as exemplifying runtime enforcement for agentic API security.
Salesforce is positioning its Trust Boundary as the definitive architecture for the agentic enterprise at Dreamforce 2026, but the trust stack has not coalesced into a single platform and has instead fractured into three distinct, often incompatible domains: governance specification, runtime authority, and runtime enforcement. Governance specification remains a crowded, nascent field where enterprises cobble together stacks from vendors like Okta, IBM, Broadcom, and Dataiku, a focus supported by the UC Berkeley MAST taxonomy finding that 79% of multi-agent failures trace to specification problems rather than model limitations. Runtime authority is shifting from static permissions to dynamic models, with Akeyless introducing intent-based access control and CrowdStrike pushing SPIFFE-based identities, though Akeyless CEO Oded Hareven says there is still no single place issuing, governing, and revoking that authority. Runtime enforcement, the domain of bidirectional API security and agent fabrics, was recently exemplified by the expanded integration between Akamai and MuleSoft, and matters because 87% of organizations reported an API security incident in 2025. Despite the marketing at Dreamforce, no single vendor covers all three layers, and the unified solution is in practice a multi-vendor assembly project, a fragmentation that feeds a merchant readiness paradox in which 42% of merchants are testing agentic systems while only 3% of transactions actually involve agents. Gartner warns that 40% of autonomous AI efforts will be partially derailed by governance gaps discovered only after production incidents, and with Nvidia's $12.9 billion acquisition of Hugging Face and Stripe's $7.5 billion acquisition of OpenRouter, the industry's largest acquirers are buying routing infrastructure at premium valuations, signaling that the orchestration layer's fragmentation is itself the margin risk.
Akamai Technologies IncExpanded integration between Akamai and MuleSoft cited as exemplifying runtime enforcement for agentic API security.
Crowdstrike Holdings IncCrowdStrike is pushing SPIFFE-based identities for runtime authority in the agent trust stack.
International Business Machines
Okta Inc
Salesforce.com IncSalesforce positions its Trust Boundary as the definitive agentic-enterprise architecture at Dreamforce 2026, but the article notes no single vendor covers all three trust layers.
NVIDIA CorporationNvidia's $12.9 billion acquisition of Hugging Face is cited as a large acquirer buying routing infrastructure, mentioned only in passing.
Broadcom Inc
CTO Realty Growth Inc
Gartner IncNvidia's $12.9 billion acquisition of Hugging Face is a major financial/valuation event for the company.
Stripe's $7.5 billion acquisition of OpenRouter is a major financial/valuation event for the company.
Akeyless is cited for introducing intent-based access control in the runtime authority layer, but the article notes no single place yet governs that authority.
Stripe's $7.5 billion acquisition of OpenRouter is cited as a large acquirer buying routing infrastructure, mentioned only in passing.