Nice launch. You mention agent delegation, so I'm curious how far that goes. The one-hop case is answered upthread (agent's grants ∩ user's). But what happens when my agent asks someone else's agent to do part of the job? Does that second agent act on my permissions, on my agent's, on its own, or on the overlap? And does the audit log show the whole chain, or just whoever made the last call?
Asking because I keep running into this with agents that talk to other people's agents, and the audit part worries me more than the permissions part.
Asking because I keep running into this with agents that talk to other people's agents, and the audit part worries me more than the permissions part.