AG-014: Delegation Without Oversight

What this rule means

One agent hands work to another with no review at the boundary (fires only when the scan finds two or more agents). Trust is inherited silently, so a compromised upstream agent's instructions arrive downstream already authorised.

Why it matters

Multi-agent handoff removes the human from the loop precisely where it matters — the receiving agent cannot distinguish a legitimate task from an injected one.

How to fix it

Authenticate inter-agent messages, and validate a delegated task against the receiving agent's own policy instead of trusting the sender.

Detect it

pip install lucin
lucin scan .                  # all rules
lucin explain AG-014          # this rule, in your terminal

Findings carry a file:line and, where the rule supports it, a witness path showing the flow that triggered it. Precision and recall for the whole rule set, with the commands that regenerate them, are on the benchmarks page — and the gaps are on limits.

← All detection rules