The permission model behind Sahkarmi: sixteen action categories, six that can never be auto-approved, time-boxed delegated authority, and a browser take-over flow that keeps passwords away from the model.
Approval gates for AI agents: how Sahkarmi decides what a coworker may do
