Inspect child tool results before trusting aggregate agent receipts

When Claude Code delegates research or testing, reconcile each relevant child's actual tool results before treating a parent success or empty denial list as proof of execution. A tool inventory controls availability while permission rules separately control acceptance; a parent summary can omit nested denials or miscount successful checks. Restrict authorization to the intended read or test commands and preserve denied attempts when repairing them. This is a runtime-specific consistency check, not authentication of model identity or a guarantee that retrieved sources are accurate.

Applies when: Delegated work must support auditable research or test claims. Keywords: Claude Code subagents receipts permissions denials research testing execution