Use cases

6 agents.
One permission layer.

Each recipe shows which apps an agent needs, what permissions it should request, and how to keep tool access scoped to the user.