AI coding tools are entering their permissions era, and not a moment too soon. For the last year, the category has behaved as if terminal access were just another convenience feature. Let the agent edit files, install packages, restart containers, talk to Kubernetes, touch databases, maybe push a branch, and