Principal-Agent Problem

A spawned sub-agent inherits the parent's bypass settings unless you scope it explicitly

A dev.to post argues that real-time supervision of a swarm is not available and the work of oversight becomes prevention by construction. All four of its requirements have to be enforced at the tool call every sub-agent shares.