subagents

Delegation with restricted tool permissions is enforced through governance routing before subagent invocation. The subagents skill wraps runAgent to spawn subagents that execute only with explicit, scoped permissions you define, ensuring controlled task distribution across agents.

Governed subagent delegation adds a permission-enforcement layer before runAgent invocation. While runAgent executes agents directly, the subagents skill routes through governance first, validating and restricting available tools, making it suitable for orchestration scenarios requiring safety controls.

Use subagent orchestration when you need explicit governance over distributed task execution, tool access restrictions, or safe agent lifetime control. It's designed for scenarios where permission enforcement and delegation governance must happen before any subagent spawns.

Yes. The subagents skill enforces scoped permissions as a core feature—subagents run only with the explicit, limited tool set you authorize. Governance routing validates permissions prior to runAgent invocation, ensuring no unauthorized tool access.

Governance routing intercepts delegation requests before runAgent executes, checking permission rules and agent routing policies you define. This thin wrapper encapsulates permission checks and safe subagent lifetime control, preventing unauthorized tool access at delegation time.