Glossary · Agent fundamentals

Delegation chain

A delegation chain is the tree of agents created when an AI agent spawns sub-agents for sub-tasks, which may spawn their own. Each hop can widen access and blur accountability, so security controls must track the full chain: which root agent a given action ultimately serves, and at what depth.

Delegation is how agent systems scale, and how permissions quietly spread. A sub-agent typically inherits capabilities from its parent; three hops later, a task nobody reviewed is running with access granted for a different purpose. Governing chains means propagating identity and scope down the tree, capping depth, and treating high-consequence actions as review points regardless of where in the tree they occur.

Related

Shrike governs AI agent actions in real time: every command, query, and tool call evaluated against policy before it executes. Watch an agent get refused in the playground, where every tool call is scanned for real, or read what is action governance.