The agent's governance findings — a separate collection from its vulnerabilities, never combined with
them (incomparable severity scales).

An agent with no signals is an empty page, not a 404. ⚠ This currently returns an empty page

for most tenants because the governance writer only recently began producing rows; an empty page is the
honest answer, not evidence that the agent carries no governance risk.