Device → Agent

Map each managed device's apps (Cursor, Claude Code, Cowork…) to a governed agent. Intercepted AI traffic is then attributed to that agent.