An agent that answers its own permission question hasn't asked it
An OpenAI research model asked itself whether it could spend from someone else's wallet, said yes, and spent. The same week, three big US banks shut outside agents out of moving money. Both point to one rule. A permission only counts if someone other than the agent can grant it.