Delegations
Zero-Trust Containment
Authority delegation chains and scope containment verification
Containment Invariant: An agent cannot delegate authority it does not possess. Sub-delegations that exceed the root granted scope are deterministically rejected with zero AI inference.
Total Delegations
5
Valid Chains
3
Scope Violations
2
Max Chain Depth
Lvl 3
| Delegation ID | Delegation Path | Scope Granted | Depth | Status | Created |
|---|---|---|---|---|---|
| del_001 | orchestrator_v2data_agent | read_dbquery_customers | d=1 | ALLOW | 19/9/2026 |
| del_002 | data_agentreport_agent | read_dbquery_customers | d=2 | ALLOW | 19/9/2026 |
| del_003 | escalation_agentexternal_caller | read_dbquery_customersexport_piisend_email | d=1 | BLOCK | 19/9/2026 |
| del_004 | orchestrator_v2analyst_agent | read_filegenerate_summary | d=1 | ALLOW | 19/9/2026 |
| del_005 | report_agentexport_worker | write_s3egress_network | d=3 | BLOCK | 19/9/2026 |