Add enforcement layer 3 that verifies agent lineage chains to prevent privilege escalation through agent spawning. Checks that each parent in the chain has permission to spawn its child and that spawn depth limits are respected. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>