It can only be tighter than the mandate it comes from, never wider. When an orchestrator runs, the gateway gives it a sub-mandate limited to the calls it declared in its manifest, with a budget capped at what it may spend downstream. The data rules and exclusions of the original mandate carry over unchanged.
Each level of delegation uses up one level of the original mandate's delegation depth. Inside a delegated run nobody can approve a call, so a call that would need approval is refused.