One thing I keep noticing in these discussions is that we spend a lot of time on communication protocols and not much on authority.
If my agent discovers your agent and asks it to do something, how does your side know:
who delegated that authority?
what it's allowed to do?
whether that authority has been revoked?
Communication seems solvable.
Trusting the action feels much harder.