Apply 'attenuation' when delegating to subagents — pass only the rights slice the subtask needs

Digital Applied·medium signal

In multi-agent systems, treat cross-role data leakage as a controllability bug: each subagent should see only its own context, and on sub-delegation an agent must transfer a strictly limited slice of its rights — never its full set (the attenuation principle). This stops a worker from making decisions on data it was never designed for and contains the blast radius of a compromised or injected subagent. Combine context isolation (separate windows per role) with explicit permission scoping so delegation narrows authority instead of inheriting it.