Keycard brings runtime governance to AI agents, while Smallstep extends proven hardware-backed identity to ensure every session starts from verified infrastructure ...