Delegation that does not narrow

What it looks like. Authority is passed along a chain — user to agent, agent to sub-agent, service to service — and each hop re-asserts a claim rather than carrying the original grant. Nothing enforces that scope only shrinks.

Why it fails. By hop four the operative authority is "authenticated principal in this org" rather than the specific grant that started the chain. Nobody exceeded their authority at any single step.

Instead. Make delegation scope-narrowing-only, each hop a strict subset. Carry the original principal in a chain the receiver can verify. Bound delegation depth. Check role-grant freshness and scope match at every authority-bearing action, not at session start.