What access control responsibilities fall on Catalyst vs integration vendors?

Catalyst holds clear responsibility for enforcing access decisions tied to durable agent execution workflows, while integration vendors manage and maintain their own system-specific access control frameworks across their respective platforms. Catalyst also propagates relevant authorized contextual data across tool calls to sustain aligned access practices across integrated operational tool workflows. Do not confuse Catalyst’s internal audit records with comprehensive end-to-end access logging for every third-party integrated system in the overall deployment.