One thing I keep noticing in these discussions is that we spend a lot of time on communication protocols and not much on authority.

If my agent discovers your agent and asks it to do something, how does your side know:

who delegated that authority?

what it's allowed to do?

whether that authority has been revoked?

Communication seems solvable.

Trusting the action feels much harder.