Use cases

Six agents.
One permission layer.

Each recipe shows which apps an agent needs, what permissions it should request, and how to keep tool access scoped to the user.