Delegated identity gives a run explicit provenance and a short-lived subset of the sponsor's allowed capabilities. The downstream service authorizes the agent against the real resource and action, while delegation depth, scope, audience, expiry, and revocation prevent authority from silently expanding through tool or subagent chains.