Add an agent to the catalogue
Two routes, depending on who built the software.
Tarnbrook Financial Group built it
Tarnbrook Financial Group describes the release, issues the agent a governed identity, and its own authority decides what that identity may do. The identity is created here.
Another company built it
The publisher keeps the identity it already runs, and keeps its own key. Tarnbrook Financial Group recognises that publisher and sets a limit on what any agent of theirs may ask for. No second identity is created.