Sub-agent delegation chaining

Epistemic status: pretty confident in the validity of the core proposal, not that confident in specific implementation detailsTL;DR: we should cryptographically verify that sub-agent instances/sessions are downstream of human instructionsFrontier AI labs have started using LLM-based monitoring systems to check for misbehavior from their internal AI agents, which often run unwatched by humans for hours or days. One central reason to be concerned about rogue internal deployments, where AIs subvert...