Pigeon, a signed Pass for what a sub-agent may do
Summary
Pigeon introduces a signed Pass to authorize sub-agents, bounding what they can do instead of distributing full credentials. It covers grant/verify workflows, enforcement via MCP middleware, and code examples that illustrate delegating authority, verifying actions, and preventing privilege escalation. The piece emphasizes least-privilege and zero-trust concepts when delegating AI agent capabilities.