Single-issuer agent delegation is solved. The moment the chain crosses into a partner's identity provider, RFC 8693 throws the upstream signature away. Here is how I kept the human provable across the boundary in Crumb.
An AI agent acted across two companies. Whose audit log knows which human?
