Your "permission record can narrow but not expand" rule handles delegation well, but there's a related failure mode that isn't about a child task expanding scope - it's about the parent task being underspecified in the first place, so there's no permission boundary to narrow from. Your...