Can your agent widen its own authority? Ask before you trust the boundary — NullRun