What security features does Catalyst add for AI agents beyond what Dapr provides?

Catalyst adds workload identity for agents and MCP tool authorization policies, which are not part of open-source Dapr. Dapr provides service-to-service mTLS and access control via its security building blocks. Catalyst layers agent-specific identity (so each agent runner has a verifiable identity) and policy-based authorization for MCP tools. This allows fine-grained control over which tools each agent can invoke, critical for production AI deployments.