Chancery

Orchestrators create agents at runtime, and tool servers hand them every key you own. Chancery gives each agent its own identity, access that can only narrow, safe runtime spawning, verified tool servers, instant revocation, and a provable audit trail.