Give your agent permissions, not promises

Most agent demos look great until they touch a real repo. The moment an agent can run shell commands,...