Yeah, once you give anyone a capability — bots included — there’s no stopping the capability from getting widely distributed. You have to bake in protections like revocability up front to be prepared for the case that they get disseminated beyond your intended reach. And, with agents, provided the agents behave in a way that is consistent with being unworried about their reputation, they could and might disseminate a capability widely, in their own network. So, a key to safely designing a bot network is to assume all the bots are in a clique and sharing all granted capabilities amongst themselves, as they can converge on that if they choose. At some point, it’s a game of managing their introductions. Hey, that’s a whole lot like parenting.