Handoff context
When agent A hands to B, what context passes? Full history default → privacy risk if agents have different scopes.
Advertisement
Tool inheritance
B may inherit A's tools. Ensure B has proper scope. Attenuate on handoff.
Advertisement
Trust boundaries
Router agent trusted. Worker agents less. Router validates worker outputs before returning to user.
Injection propagation
Agent A processes attacker doc. Injection propagates via handoff. Filter at each boundary.