What permissions should an AI agent have? A starter least-privilege policy

A least-privilege default for AI agents: an allow, ask, and deny table for common tools, not vague principles.