Optional
Resolve agent identity from trusted routing state, never from the unverified payload.
Must return a trusted externally visible URL; never derive it from untrusted forwarding headers.
Resolve agent identity from trusted routing state, never from the unverified payload.