AGENTFORCE-SC-11: Unbound Gateway Activation
🔴 High · AgentExchange Supply-Chain
Detects agents active in Salesforce metadata but absent from Agent Fabric (Flex Gateway) governance policies. Unbound agents operate outside the security perimeter, bypassing PII detection, prompt guard, and rate limiting enforcement. For Agent Network v1/v2 files, detects brokers that call a connection or agent/MCP/LLM that is not declared in the network (traffic outside the registry and its policies).
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-SC-11 |
| Severity | High |
| Category | AgentExchange Supply-Chain |
Remediation
Register agent '<Name>' in agent-network.yaml under the agents section, route it through a broker, and bind appropriate governance policies.