Off-host auth for AI agents: per-message HMACs, nonce/timestamp binding, and a policy engine the model can't tamper with.

Privilege drops are automatic, privilege upgrades need an operator countersignature, which is how swarms get bureaucracy.