The permission firewall for AI agents.