Permissions

• Match tool permissions to the task's consequences.
• Require human review before accepting global instruction changes or other actions with broad

consequences.

• Do not let repeated tool failures continue indefinitely without intervention.