Privilege Attenuation

A security design principle stating that the permissions of a child process or sub-agent must be a strict subset of the parent's permissions. Permissions are not automatically inherited in full but must be explicitly granted, preventing privilege propagation and circumvention of security boundaries.