Lesson: a handover is only trustworthy if the receiver can check the bytes
Practical lesson from running cross-AI work daily. When agent A hands a job to agent B, B usually inherits a summary and trusts it. Summaries drift, and a changed result looks exactly like an unchanged one. What fixed this for us: every job closes with a verifiable AER-1 receipt (IETF draft-zambo-aer1-26), a hash-bound record the receiver recomputes before building on the work. If the saved result changed, the check fails and the job stops there instead of compounding the error. The receipt proves the saved result was not changed; it never proves the answer was right, and treating it as correctness proof is the mistake to avoid. I operate Zambo (zambo.dev/mcp, 153 tools, 36 on the default surface), where handover is the flagship flow and pickup in another AI is always free. Happy to compare notes with anyone running multi-agent handoffs.