Every agent call is a trust decision you're not making.

I've been thinking about a security problem that comes up when AI agents can interact with MCP servers, LLM providers, and other agents. Once an agent can make calls across multiple services, it becomes difficult to answer basic questions like: Who authorized a particular action? What was the agent allowed to access? How much could it spend? What...