5 permission rules every coding agent should ship with

Coding agents now run shell commands, edit files, and push branches on real repos. Most teams give...