docs: clarify privacy-preserving geolocation in KAgentI integration

- Updated KAgentI row to emphasize privacy-preserving geolocation binding
- Added protection against sensitive data exfiltration attacks
- Clarified that location verification preserves privacy while preventing spoofing

Author: ramkri123

README.md

@@ -127,7 +127,7 @@ AegisSovereignAI is designed to be framework-agnostic, serving as a secure execu
 | Agent Framework | Complementary Value of AegisSovereignAI | How AegisSovereignAI Accomplishes This |
 | --- | --- | --- |
 | **LangGraph** | **Just-in-Time Policy Enforcement:** Prevents agentic drift or PII leakage across complex, multi-step workflows. | **Automated Kill-Switch:** Fuses the agent session with a silicon-rooted SVID (SPIFFE Verifiable Identity Document) (Layer 2). Session inputs and outputs are verified via privacy-preserving "Batch & Purge" (Layer 3) before final delivery — proofs are generated over the complete session, not per-step. |
-| **KAgentI** | **Replay-Proof Agent Authorization:** Ensures each agent invocation is bound to verified hardware and location, preventing token replay and impersonation attacks. | **Hardware-Rooted SVID:** Extends KAgentI's native SPIRE support by binding SVIDs to TPM-attested device credentials and geolocation (Layer 2). This ensures the agent identity cannot be replayed or spoofed — the token is cryptographically bound to specific silicon and verified location, not just a valid service principal. |
+| **KAgentI** | **Replay-Proof Agent Authorization:** Ensures each agent invocation is bound to verified hardware and privacy-preserving geolocation, preventing token replay and impersonation and sensitive data exfiltration attacks. | **Hardware-Rooted SVID:** Extends KAgentI's native SPIRE support by binding SVIDs to TPM-attested device credentials and privacy-preserving geolocation (Layer 2). This ensures the agent identity cannot be replayed or spoofed — the token is cryptographically bound to specific silicon and verified location while preserving privacy, not just a valid service principal. |
 
 ## Technical & Auditor Resources