A JWS-inside-JWE token that travels with each invocation, carrying the originator's authorization context - who authorized the action, under what scope, and through which trust model - across every boundary in a multi-agent flow. Signed per hop and chained, it provides tamper-evident, end-to-end attribution and chain-of-custody.