What My Sub-Agents Actually Need (It's Not Roles)

SPIFFE got the big idea right. Roles got the small idea wrong. Here&#x27;s why agents need mandates — task-scoped Cedar policies signed into JWTs — instead of categorical labels.