Authorization Is a Runtime Decision, Not a One-Time Permission

An AI agent shouldn’t receive permanent permission just because its initial task looked safe. ...