Give your AI ops agent read access to prod, and make every write ask first

I work at Permit, and this comes from a post on our blog about governing AI ops agents, so keep the...