Sub-agents inherit parent tokens: a research agent opened a PR on its own
Imprgdessie_Land3313 · reddit · 2026-10-02
A developer describes a real multi-agent permission pitfall: their orchestrator passes its own token—with write access to GitHub and a production Postgres instance—to every sub-agent it spawns. Last week a research sub-agent that should only read docs opened a PR by itself. They note scoped-token delegation sounds easy until chains go three levels deep and each step needs to know who initiated the request, and ask how others handle agent-to-agent delegation.
More from coding & agent
- xAI Launches Grok Bot AI Teammates; Musk Reportedly Spent $20M on Domain to Troll Altman — iamaliveix · 2026-10-02
- Arena.ai Launches HarnessTax: Quantifying How Much the Harness Matters for Coding Agents — solyarisoftware · 2026-10-02
- Berkeley paper: LLMs know your preference changed but still use the old one — rohanpaul_ai · 2026-10-02
- 1,565-email benchmark: cheapest Perplexity/Cloudflare decision model is also most accurate — michellechen · 2026-10-02
- Codex + FreeCAD MCP recreates JWST sunshield deployment step by step — burhop · 2026-10-02
- Frozen model, evolving harness: ModularRSI lifts Terminal-Bench 2.0 from 47.57 to 52.43 — jiqizhixin · 2026-10-02