AI Agent Tool Permissions: A Side-Effect and Approval Envelope
The approval checkpoint binds a reviewed proposal to a bounded execution. Illustration. AI agent tool permissions should describe the effect an operation may produce, the resources it may touch and the conditions that permit execution. Human approval belongs inside that boundary. An approval envelope records the exact proposed action, its permitted lifetime and the circumstances that require the system to stop or ask again. Start with an operation that matters. Consider a hypothetical renewal assistant that reads an assigned customer account, prepares an internal note and proposes an email to the existing account contact. The assistant can help with all three activities, but the authority needed for each differs. Editing a private draft does not justify sending it, and permission to send one message does not justify exporting the account history. The design below is an engineering worksheet for that example, not a documented client deployment or a universal security standard. Its pur...