Multi-agent orchestration is where permissions become critical. Who can use which agent? What can each agent access? I'm building Pinchy (https://heypinchy.com) for exactly this: enterprise governance layer on OpenClaw with RBAC and audit trails. AGPL, self-hosted.