Agent-to-Agent Auth: What Breaks When Agents Call Agents

We built a six-hop agent delegation chain and ran eight probes against it. A spec-complete verifier caught one. The delegation history grows on every request and RFC 8693 says the resource server MUST ignore all of it but the last actor — here is what actually breaks, and what to build instead.