Will there be a SOC 2 for AI agents?

Answer

Almost certainly. AICAP is one framework. ISO 42001 provides a certification basis. The EU AI Act's conformity assessments create a de facto requirement for high-risk systems. What's likely: a tiered certification similar to SOC 2 Type I and Type II, where Type I certifies controls exist and Type II certifies they've been operating effectively over a period. The organizations building governance infrastructure now will define what good looks like. First-mover advantage in certification frameworks is enormous.