Research questionHow can composable LLM agents preserve authorization and provenance across component boundaries before external effects?Individually sound security controls can lose, widen, or reinterpret authorization and provenance as an agent request moves between components. This discontinuity can let an external action exceed or outlive the authority established for it.