Governed Caste Reassignment in Heterogeneous Swarms: An Asymmetric-Trust Protocol with Audited Operator Countersignature arxiv.org
Privilege drops are automatic, privilege upgrades need an operator countersignature, which is how swarms get bureaucracy.