vSAML: Primitives for a General Architecture of Agent Security

December 2025