Risk management is a mature discipline. Trust has been implicit - embedded in qualifications, regulation, and human accountability. Agents break every one of those assumptions. Trust management makes the implicit explicit: what signals does this interaction require, what signals are present, and is the gap acceptable for the risk level of the action?
Every governance framework in use today embeds trust assumptions calibrated on decades of human behaviour. Agents break those assumptions. This paper argues that trust management - the explicit identification, assessment, and governance of trust signals - needs to become a discipline in its own right, with registers, scoring, thresholds, and continuous monitoring, paralleling how organisations already manage risk.