The problem
Agentic systems pass work down a chain — an orchestrator delegates to a worker, which delegates again. Every hop is an opportunity for authority to quietly widen, and a widened delegation is exactly how a scoped agent ends up with reach nobody granted. Delegation Provenance checks each mediated hop so authority can only narrow, and leaves a signed receipt whether the hop is allowed or refused.
What you get
Outcomes you can take to a skeptical security team.
- Every mediated delegation hop checked: authority may narrow, never broaden
- A signed receipt for each hop — whether it was allowed or refused
- Built on the IETF Delegation-Receipt model, an open and inspectable format
- An honest boundary: hops that route through the mediated path are the ones attested
How it works
Three steps, no surprises.
01
Route the hand-off
When one agent delegates to another through the mediated path, the hop is evaluated.
02
Confirm it narrows
The hop is allowed only if the delegated authority is a subset of what was held.
03
Keep the receipt
Each hop emits a signed Delegation Receipt — allowed or refused — for the record.
Continue the platform