MCP

Runtime agent governance: whose permissions does a delegated agent use?