Anthropic recently published an excellent write-up on how they contain Claude Code and its sub-agents.

One thing that stood out is that the architecture isn’t really about Claude—it describes a general pattern for securing autonomous agents:

* Every agent gets its own identity. * Authority is delegated (and attenuated) to sub-agents instead of being inherited wholesale. * Tool access is authorized per action. * Every action is attributable back to the originating principal.

We took that architecture apart and mapped it to explore how the same model can be applied across heterogeneous agent fleets (Claude Code, Codex, etc.), not just Anthropic’s own stack.

The post focuses on the architecture rather than the product:https://www.highflame.com/blog/how-anthropic-contains-its-ow...

I’d be interested in feedback from people building agent systems.