Yeah basically, every token carries the full chain of which agent did this, under whose authority, and with what permissions.