Governing agents and MCP tools on the Now Platform.
AI Gateway GA (10 Sep 2026) inside AI Control Tower enforces MCP connections with OAuth 2.1, tool-level governance, and block-not-mask sensitive-data controls. A UK Steward CAB checklist for production.
AI Control Tower Aug/Sep 2026 adds runtime observability and LLM-as-a-judge evaluations (including Traceloop for external agents). UK Steward playbook: Zurich P11 / Australia P4+, managed inventory, Trace Collectors vs SDK, Monitor dashboard — not Kill Switch.
AI Control Tower Aug/Sep 2026 ships a Kill Switch that revokes agent credentials across Okta, GCP and AWS Bedrock and stops agents at runtime — cutting mean time to contain from ~30 minutes to seconds. UK CISO playbook before you treat it as production IR.
From 9 Jul 2026, OOTB Now Assist / Otto skills switch to third-party model defaults with each store app update. UK estates need an AI Control Tower allowed-provider gate, CAB dual-run evidence and a Now LLM retirement plan — before Assists look fine and skills are blocked.
Australia turns AI Control Tower into an enterprise command centre for agents, prompts and MCP — with AI Gateway enforcement and kill switches. Here is how UK teams should roll it out without freezing delivery.